@antzsoft/chat-core 1.4.5 → 1.4.7

package/dist/internal.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/internal.ts","../src/compression/compress.ts","../src/api/client.ts","../src/errors.ts","../src/crypto/uuid.ts","../src/api/storage.ts"],"sourcesContent":["// Internal exports for use by the web and RN SDKs only.\n// Not part of the public API — do not use in application code.\nexport { uploadBatchWithSlots } from './api/storage.js';\nexport { generateUUID } from './crypto/uuid.js';\n","import type { UploadableFile, CompressedFile, CompressionAlgorithm } from '../types/index.js';\nimport type { PlatformCompressFn, ResolvedCompressionConfig } from '../config/types.js';\n\n// MIME types that benefit from gzip (text-based, not already compressed)\nconst GZIP_MIME_TYPES = new Set([\n  'text/plain', 'text/csv', 'text/markdown', 'text/x-markdown',\n  'text/xml', 'application/xml', 'text/yaml', 'text/x-yaml',\n  'application/x-yaml', 'application/rtf', 'text/rtf',\n  'application/json', 'image/svg+xml',\n]);\n\nconst IMAGE_MIME_TYPES = new Set([\n  'image/jpeg', 'image/png', 'image/gif', 'image/webp', 'image/bmp', 'image/tiff',\n]);\n\n// Already-compressed formats — no gain from recompressing\nconst SKIP_MIME_TYPES = new Set([\n  'video/mp4', 'video/webm', 'video/quicktime',\n  'audio/mpeg', 'audio/wav', 'audio/ogg', 'audio/webm', 'audio/mp4',\n  'application/zip', 'application/pdf',\n  'application/vnd.openxmlformats-officedocument.wordprocessingml.document',\n  'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet',\n  'application/vnd.openxmlformats-officedocument.presentationml.presentation',\n]);\n\nexport type CompressionStrategy = 'image' | 'gzip' | 'skip';\n\nexport function getCompressionStrategy(\n  mimeType: string,\n  config: ResolvedCompressionConfig,\n): CompressionStrategy {\n  if (SKIP_MIME_TYPES.has(mimeType)) return 'skip';\n  if (IMAGE_MIME_TYPES.has(mimeType)) return 'image';\n  if (config.compressDocuments && GZIP_MIME_TYPES.has(mimeType)) return 'gzip';\n  return 'skip';\n}\n\n/**\n * Attempt to compress a file using the platform-provided compressor.\n * Returns the original file unchanged (as a CompressedFile with compressed=false)\n * if compression is disabled, no compressor is provided, or the strategy is 'skip'.\n */\nexport async function compressFile(\n  file: UploadableFile,\n  platformCompressFn: PlatformCompressFn | undefined,\n  config: ResolvedCompressionConfig,\n): Promise<CompressedFile> {\n  const noop: CompressedFile = {\n    ...file,\n    originalSize: file.size,\n    compressed: false,\n    compressionAlgorithm: 'none' as CompressionAlgorithm,\n  };\n\n  if (!config.enabled || !platformCompressFn) return noop;\n\n  const strategy = getCompressionStrategy(file.type, config);\n  if (strategy === 'skip') return noop;\n\n  try {\n    return await platformCompressFn(file, config);\n  } catch {\n    // Compression failure is non-fatal — fall back to original\n    return noop;\n  }\n}\n","import axios, {\n  AxiosInstance,\n  InternalAxiosRequestConfig,\n} from 'axios';\nimport type { ResolvedConfig } from '../config/types.js';\nimport type { AuthTokens } from '../types/index.js';\nimport { encryptPayload, decryptPayload, isTransitEnvelope } from '../crypto/transit.js';\nimport { getSessionKey, getSessionId, isTransitEnabled, awaitTransitReadyOr, configureTransit, setTransitSession, getTransitSession } from '../crypto/session.js';\nimport { createRestTransitSession, fetchServerKeys } from '../crypto/handshake.js';\nimport { detectTransitAlgo } from '../crypto/detect.js';\nimport { normalizeAxiosError, AntzChatNetworkError } from '../errors.js';\n\n// Hard ceiling on how long a single request will block waiting for the transit\n// handshake. A legitimate cold-start handshake resolves in well under this even\n// on a slow link (TransitGate already spent ~6s, establishTransit keeps\n// retrying). Past this we FAIL the request with a retryable error rather than\n// leave it pending forever — react-query cannot retry / refetch-on-focus a\n// request that never settles, so an unbounded wait here is an unrecoverable\n// silent hang. Each failed+retried request also re-arms ensureRestTransitHandshake.\nconst TRANSIT_GATE_MAX_WAIT_MS = 30_000;\n\nexport type TokenStore = {\n  getAccessToken: () => string | null | undefined;\n  getRefreshToken: () => string | null | undefined;\n  setTokens: (tokens: AuthTokens) => void;\n  clearTokens: () => void;\n};\n\nlet _tokenStore: TokenStore | null = null;\nlet _config: ResolvedConfig | null = null;\nlet _avatarSent = false;\n// In-flight transit handshake promise — shared between initApiClient and connectSocket\n// so they never fire two concurrent HTTPS handshakes for the same session.\nlet _transitHandshakePromise: Promise<void> | null = null;\n// Gate the request interceptor until the SDK has resolved a token (async\n// authProvider) and, where wired, the transit handshake. Set by the SDK\n// provider; the interceptor awaits it before attaching the Authorization\n// header so early requests (e.g. useConversations' initial fetch) don't race\n// ahead unauthenticated.\nlet _authReadyPromise: Promise<unknown> | null = null;\n\nexport function getTransitHandshakePromise(): Promise<void> | null {\n  return _transitHandshakePromise;\n}\n\nexport function setAuthReadyPromise(promise: Promise<unknown> | null): void {\n  _authReadyPromise = promise;\n}\n\n// True once initApiClient() has run and its config has not been torn down by a\n// subsequent disconnectSocket(). Lets the SDK provider detect the case where a\n// React remount skipped re-init (its key was unchanged) but disconnectSocket()\n// had nulled _config in between — leaving the request interceptor unable to see\n// transitEncryption and firing every request as unencrypted plaintext.\nexport function isApiClientConfigured(): boolean {\n  return _config !== null;\n}\n\n// (Re-)kick the HTTPS transit handshake. Idempotent: no-ops when transit is\n// disabled, a session already exists, or an attempt is already in flight.\n// Called both at init and from the request interceptor when a request is about\n// to block on waitForTransitReady() with no session — e.g. after a socket\n// disconnect cleared the session and nothing else re-established it.\n//\n// It only calls configureTransit(false) — which un-gates the interceptor and\n// lets requests go out as PLAINTEXT — when the server itself reports transit\n// disabled (GET /crypto/pubkey → enabled:false, i.e. an old server). A transient\n// failure of POST /crypto/session (network blip, rate limit, 5xx) must NOT\n// disable transit: the server still requires it, so plaintext would just 403.\n// Instead we retry with backoff; waitForTransitReady() keeps requests pending\n// and they dispatch the moment a retry sets the session.\nexport function ensureRestTransitHandshake(): void {\n  if (!_config?.transitEncryption || getTransitSession() || _transitHandshakePromise) return;\n  const apiUrl = _config.apiUrl;\n  _transitHandshakePromise = (async () => {\n    try {\n      for (let attempt = 0; attempt < 5; attempt++) {\n        if (getTransitSession()) return;\n        try {\n          const keys = await fetchServerKeys(apiUrl);\n          if (!keys?.enabled) {\n            configureTransit(false); // server genuinely doesn't want transit\n            return;\n          }\n          const session = await createRestTransitSession(apiUrl);\n          if (session && !getTransitSession()) {\n            const algo = typeof globalThis.crypto?.subtle !== 'undefined'\n              ? await detectTransitAlgo()\n              : 'x25519';\n            setTransitSession({ sessionKey: session.sessionKey as CryptoKey, algo, sessionId: session.sessionId, enabled: true });\n            return;\n          }\n        } catch {\n          /* transient — fall through to backoff */\n        }\n        await new Promise((r) => setTimeout(r, Math.min(500 * 2 ** attempt, 8_000)));\n      }\n      console.error(\n        '[AntzChat] transit handshake could not establish a session after 5 attempts — ' +\n          \"chat requests stay gated until one succeeds (server requires transit).\",\n      );\n    } finally {\n      _transitHandshakePromise = null;\n    }\n  })();\n}\n\nexport function initApiClient(config: ResolvedConfig, tokenStore: TokenStore): AxiosInstance {\n  _config = config;\n  _tokenStore = tokenStore;\n  _avatarSent = false; // reset on re-init (new session / authToken change)\n\n  const client = axios.create({\n    baseURL: config.apiUrl,\n    headers: { 'Content-Type': 'application/json' },\n  });\n\n  // Configure transit as early as possible — before any requests fire —\n  // so waitForTransitReady() in the interceptor knows whether to block or not.\n  configureTransit(config.transitEncryption);\n\n  // Kick off the HTTPS transit handshake immediately so REST calls that fire\n  // before connectSocket (e.g. getMe() right after initApiClient) are not\n  // blocked indefinitely. Store the promise so connectSocket can await it\n  // instead of firing a duplicate handshake.\n  ensureRestTransitHandshake();\n\n  // ── Request interceptor ──────────────────────────────────────────────────\n  client.interceptors.request.use(async (req: InternalAxiosRequestConfig) => {\n    // Wait for the SDK's auth (and, where wired, transit) gate before reading\n    // the token — otherwise a request fired during boot goes out with no\n    // Authorization header.\n    if (_authReadyPromise) await _authReadyPromise;\n\n    const token = _tokenStore?.getAccessToken();\n    if (token) req.headers['Authorization'] = `Bearer ${token}`;\n    if (_config?.userId)   req.headers['x-user-id']   = _config.userId;\n    if (_config?.tenantId) req.headers['X-Tenant-ID'] = _config.tenantId;\n    // Send avatar on the first request only — server hashes and deduplicates\n    if (token && !_avatarSent && _config?.avatar) {\n      if (_config.avatar.base64) req.headers['x-avatar-base64'] = _config.avatar.base64;\n      else if (_config.avatar.url) req.headers['x-avatar-url'] = _config.avatar.url;\n      _avatarSent = true;\n    }\n\n    // Wait for the transit session key before sending any request. The server\n    // enforces transit encryption independent of auth (e.g. GET /app/config\n    // fires before the async authProvider token resolves) — gating this on\n    // `token` let those pre-auth requests race ahead of the handshake and get\n    // rejected with 403 \"Transit encryption required\".\n    if (_config?.transitEncryption) {\n      // If the session is gone (socket disconnect cleared it, first boot still\n      // pending), make sure a handshake is running before we block — otherwise\n      // the wait could hang with nothing to resolve it.\n      if (!getTransitSession()) ensureRestTransitHandshake();\n      const ready = await awaitTransitReadyOr(TRANSIT_GATE_MAX_WAIT_MS);\n      if (!ready) {\n        // Handshake still hasn't produced a session. Do NOT send plaintext\n        // (server requires transit); fail loudly instead so the error surfaces\n        // in the UI and react-query's retry re-drives the handshake.\n        throw new AntzChatNetworkError(\n          'Secure channel to chat server not established — request not sent. It will retry automatically.',\n          'TRANSIT_NOT_READY',\n          { url: req.url },\n        );\n      }\n    }\n\n    if (isTransitEnabled()) {\n      const sessionId = getSessionId();\n      const key = getSessionKey();\n      if (sessionId && key) {\n        req.headers['x-transit-session'] = sessionId;\n        if (req.data !== undefined && req.data !== null) {\n          const envelope = await encryptPayload(req.data, key);\n          req.data = envelope;\n          req.headers['x-transit-encrypted'] = '1';\n        }\n      }\n    }\n\n    return req;\n  });\n\n  let isRefreshing = false;\n  let refreshQueue: Array<(token: string) => void> = [];\n\n  // ── Response interceptor ─────────────────────────────────────────────────\n  client.interceptors.response.use(\n    async (response) => {\n      // Transit decryption — server wraps encrypted payload inside { success, data: <envelope> }.\n      // Decrypt the inner envelope, then let the standard unwrap below handle { success, data }.\n      if (isTransitEnabled()) {\n        const key = getSessionKey();\n        if (key) {\n          // Case 1: entire response is the envelope (unlikely but handle it)\n          if (isTransitEnvelope(response.data)) {\n            response.data = await decryptPayload(response.data, key);\n          }\n          // Case 2: envelope is nested inside { success, data: <envelope> }\n          else if (response.data?.data && isTransitEnvelope(response.data.data)) {\n            response.data.data = await decryptPayload(response.data.data, key);\n          }\n        }\n      }\n\n      // Standard { success, data } unwrap\n      if (\n        response.data &&\n        typeof response.data === 'object' &&\n        'success' in response.data &&\n        'data' in response.data\n      ) {\n        response.data = response.data.data;\n      }\n      return response;\n    },\n    async (error) => {\n      // Decrypt error response body — error filter encrypts it too\n      if (isTransitEnabled() && error.response?.data) {\n        const key = getSessionKey();\n        if (key) {\n          try {\n            if (isTransitEnvelope(error.response.data)) {\n              error.response.data = await decryptPayload(error.response.data, key);\n            } else if (error.response.data?.data && isTransitEnvelope(error.response.data.data)) {\n              error.response.data.data = await decryptPayload(error.response.data.data, key);\n            }\n          } catch { /* decryption failed — leave as-is */ }\n        }\n      }\n\n      const original = error.config as InternalAxiosRequestConfig & { _retry?: boolean };\n\n      if (error.response?.status === 401 && !original._retry) {\n        const refreshToken = _tokenStore?.getRefreshToken();\n        if (!refreshToken) {\n          _tokenStore?.clearTokens();\n          return Promise.reject(normalizeAxiosError(error));\n        }\n\n        if (isRefreshing) {\n          return new Promise((resolve) => {\n            refreshQueue.push((newToken) => {\n              original.headers['Authorization'] = `Bearer ${newToken}`;\n              resolve(client(original));\n            });\n          });\n        }\n\n        original._retry = true;\n        isRefreshing = true;\n\n        try {\n          const { data } = await axios.post<{ data: AuthTokens }>(\n            `${_config!.apiUrl}/auth/refresh`,\n            { refreshToken },\n          );\n          const tokens: AuthTokens = (data as any).data ?? data;\n          _tokenStore?.setTokens(tokens);\n          refreshQueue.forEach((cb) => cb(tokens.accessToken));\n          refreshQueue = [];\n          original.headers['Authorization'] = `Bearer ${tokens.accessToken}`;\n          return client(original);\n        } catch {\n          _tokenStore?.clearTokens();\n          return Promise.reject(normalizeAxiosError(error));\n        } finally {\n          isRefreshing = false;\n        }\n      }\n\n      return Promise.reject(normalizeAxiosError(error));\n    },\n  );\n\n  return client;\n}\n\nlet _instance: AxiosInstance | null = null;\n\nexport function setApiClientInstance(instance: AxiosInstance) {\n  _instance = instance;\n}\n\nexport function getApiClient(): AxiosInstance {\n  if (!_instance) throw new Error('[AntzChat] API client not initialized. Call initApiClient first.');\n  return _instance;\n}\n","import { isAxiosError } from 'axios';\nimport { isTransitEnvelope } from './crypto/transit.js';\n\n// ─── Base error class ─────────────────────────────────────────────────────────\n\nexport class AntzChatError extends Error {\n  readonly code: string;\n  readonly retryable: boolean;\n  readonly context?: Record<string, unknown>;\n\n  constructor(\n    code: string,\n    message: string,\n    retryable = false,\n    context?: Record<string, unknown>,\n  ) {\n    super(message);\n    this.name = 'AntzChatError';\n    this.code = code;\n    this.retryable = retryable;\n    this.context = context;\n    // Maintain proper prototype chain in transpiled environments\n    Object.setPrototypeOf(this, new.target.prototype);\n  }\n}\n\n// ─── Semantic subclasses ──────────────────────────────────────────────────────\n\n/** Thrown on 401 (after refresh also fails) or when no refresh token exists. */\nexport class AntzChatAuthError extends AntzChatError {\n  constructor(message: string, code = 'AUTH_FAILED', context?: Record<string, unknown>) {\n    super(code, message, false, context);\n    this.name = 'AntzChatAuthError';\n    Object.setPrototypeOf(this, new.target.prototype);\n  }\n}\n\n/** Thrown on 400 / 422 — bad input, validation failure. */\nexport class AntzChatValidationError extends AntzChatError {\n  /** Server-returned field error array (when the server sends message as string[]). */\n  readonly fields?: string[];\n\n  constructor(message: string | string[], context?: Record<string, unknown>) {\n    const msg = Array.isArray(message) ? message.join('; ') : message;\n    super('VALIDATION_ERROR', msg, false, context);\n    this.name = 'AntzChatValidationError';\n    this.fields = Array.isArray(message) ? message : undefined;\n    Object.setPrototypeOf(this, new.target.prototype);\n  }\n}\n\n/** Thrown on network failures, timeouts, socket disconnections, and queue overflow. retryable = true. */\nexport class AntzChatNetworkError extends AntzChatError {\n  constructor(message: string, code = 'NETWORK_ERROR', context?: Record<string, unknown>) {\n    super(code, message, true, context);\n    this.name = 'AntzChatNetworkError';\n    Object.setPrototypeOf(this, new.target.prototype);\n  }\n}\n\n/** Thrown on 403 — insufficient permissions. */\nexport class AntzChatPermissionError extends AntzChatError {\n  constructor(message: string, context?: Record<string, unknown>) {\n    super('PERMISSION_DENIED', message, false, context);\n    this.name = 'AntzChatPermissionError';\n    Object.setPrototypeOf(this, new.target.prototype);\n  }\n}\n\n/** Thrown on 5xx or other unexpected server errors. retryable = true. */\nexport class AntzChatServerError extends AntzChatError {\n  readonly httpStatus?: number;\n\n  constructor(message: string, httpStatus?: number, context?: Record<string, unknown>) {\n    super('SERVER_ERROR', message, true, context);\n    this.name = 'AntzChatServerError';\n    this.httpStatus = httpStatus;\n    Object.setPrototypeOf(this, new.target.prototype);\n  }\n}\n\n// ─── Error code reference ─────────────────────────────────────────────────────\n//\n//  Code                    Class                        Source\n//  ─────────────────────   ────────────────────────     ─────────────────────────\n//  AUTH_FAILED             AntzChatAuthError            401 after refresh fails\n//  SESSION_EXPIRED         AntzChatAuthError            401, no refresh token\n//  PERMISSION_DENIED       AntzChatPermissionError      403\n//  VALIDATION_ERROR        AntzChatValidationError      400 / 422\n//  NOT_FOUND               AntzChatServerError          404\n//  RATE_LIMITED            AntzChatNetworkError         429\n//  NETWORK_ERROR           AntzChatNetworkError         No response / conn failure\n//  SOCKET_TIMEOUT          AntzChatNetworkError         ACK timeout / reconnect timeout\n//  SOCKET_NOT_CONNECTED    AntzChatNetworkError         withAck when socket is down\n//  SEND_QUEUE_FULL         AntzChatNetworkError         Queue overflow (>100 msgs)\n//  MESSAGE_DROPPED         AntzChatNetworkError         Queue TTL expired (30s)\n//  TRANSIT_MISMATCH        AntzChatError                SDK/server encryption config mismatch\n//  SERVER_ERROR            AntzChatServerError          5xx or unknown HTTP error\n\n// ─── REST error normaliser ────────────────────────────────────────────────────\n\n/**\n * Converts a raw axios error (or any unknown throw) into a typed AntzChatError.\n *\n * Call site: client.ts response interceptor — runs AFTER transit decryption,\n * so error.response.data is always plaintext by the time this function sees it.\n * If decryption itself failed, error.response.data remains the raw encrypted\n * envelope — detected via isTransitEnvelope() and noted in context.\n */\nexport function normalizeAxiosError(error: unknown): AntzChatError {\n  if (error instanceof AntzChatError) return error;\n\n  if (isAxiosError(error)) {\n    const status = error.response?.status;\n    const body   = error.response?.data;\n\n    // Detect if decryption failed — body is still an encrypted envelope\n    const decryptionFailed = body != null && isTransitEnvelope(body);\n\n    const rawMessage: string | string[] | undefined = decryptionFailed\n      ? undefined\n      : (body?.message ?? undefined);\n\n    const message: string =\n      (Array.isArray(rawMessage) ? rawMessage.join('; ') : rawMessage) ||\n      error.message ||\n      'Request failed';\n\n    const ctx: Record<string, unknown> = {\n      ...(status          != null && { httpStatus: status }),\n      ...(body?.path      != null && { path: body.path }),\n      ...(body?.error     != null && { serverError: body.error }),\n      ...(error.code      != null && { axiosCode: error.code }),\n      ...(decryptionFailed        && { decryptionFailed: true, note: 'Transit decryption failed — server error body is an encrypted envelope' }),\n    };\n\n    // No response at all — network/timeout failure\n    if (!error.response) {\n      return new AntzChatNetworkError(message || 'Network error', 'NETWORK_ERROR', ctx);\n    }\n\n    if (status === 401) {\n      // AUTH_FAILED is used when a refresh was attempted but failed (set by interceptor).\n      // SESSION_EXPIRED is the default: 401 with no prior retry = token simply expired.\n      const code = (error.config as any)?._retry ? 'AUTH_FAILED' : 'SESSION_EXPIRED';\n      return new AntzChatAuthError(message, code, ctx);\n    }\n    if (status === 403) return new AntzChatPermissionError(message, ctx);\n    if (status === 400 || status === 422) {\n      return new AntzChatValidationError(\n        Array.isArray(rawMessage) ? rawMessage : message,\n        ctx,\n      );\n    }\n    if (status === 404) return new AntzChatServerError(message, 404, ctx);\n    if (status === 429) return new AntzChatNetworkError(message, 'RATE_LIMITED', ctx);\n    if (status != null && status >= 500) return new AntzChatServerError(message, status, ctx);\n\n    return new AntzChatServerError(message, status, ctx);\n  }\n\n  const msg = error instanceof Error ? error.message : String(error);\n  return new AntzChatError('UNKNOWN_ERROR', msg, false);\n}\n","// crypto.randomUUID() doesn't exist in React Native's Hermes engine.\n// Fall back to a RFC 4122 v4 UUID built from Math.random() when unavailable.\nexport function generateUUID(): string {\n  if (typeof globalThis.crypto?.randomUUID === 'function') {\n    return globalThis.crypto.randomUUID();\n  }\n  return 'xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx'.replace(/[xy]/g, (c) => {\n    const r = (Math.random() * 16) | 0;\n    return (c === 'x' ? r : (r & 0x3) | 0x8).toString(16);\n  });\n}\n","import type {\n  BatchUploadResult,\n  FileResponse,\n  PaginatedResponse,\n  PresignedUrlRequest,\n  PresignedUrlResponse,\n  FileType,\n  UploadableFile,\n  CompletedPart,\n} from '../types/index.js';\nimport type { PlatformUploadFn, PlatformCompressFn, PlatformUploadPartFn, ResolvedCompressionConfig } from '../config/types.js';\nimport { compressFile } from '../compression/compress.js';\nimport { getApiClient } from './client.js';\nimport { generateUUID } from '../crypto/uuid.js';\n\nexport const storageApi = {\n  async requestPresignedUrl(payload: PresignedUrlRequest): Promise<PresignedUrlResponse> {\n    const { data } = await getApiClient().post<PresignedUrlResponse>('/storage/presigned-url', payload);\n    return data;\n  },\n\n  async requestPresignedUrlBatch(files: PresignedUrlRequest[]): Promise<{\n    urls: PresignedUrlResponse[];\n    errors: Array<{ filename: string; error: string; clientIndex?: number }>;\n  }> {\n    const { data } = await getApiClient().post('/storage/presigned-url/batch', { files });\n    return data;\n  },\n\n  async confirmUpload(fileId: string): Promise<FileResponse> {\n    const { data } = await getApiClient().post<FileResponse>(`/storage/confirm/${fileId}`);\n    return data;\n  },\n\n  async getFile(fileId: string): Promise<FileResponse> {\n    const { data } = await getApiClient().get<FileResponse>(`/storage/files/${fileId}`);\n    return data;\n  },\n\n  async getFileUrl(fileId: string, expiresIn?: number): Promise<{ url: string; expiresAt: string }> {\n    const { data } = await getApiClient().get(`/storage/files/${fileId}/url`, {\n      params: expiresIn ? { expiresIn } : {},\n    });\n    return data;\n  },\n\n  async deleteFile(fileId: string): Promise<void> {\n    await getApiClient().post(`/storage/files/${fileId}/delete`);\n  },\n\n  async completeMultipartUpload(\n    fileId: string,\n    uploadId: string,\n    parts: CompletedPart[],\n  ): Promise<FileResponse> {\n    const { data } = await getApiClient().post<FileResponse>(\n      `/storage/multipart/complete/${fileId}`,\n      { uploadId, parts },\n    );\n    return data;\n  },\n\n  async getConversationFiles(\n    conversationId: string,\n    params: { page?: number; limit?: number; type?: FileType } = {},\n  ): Promise<PaginatedResponse<FileResponse>> {\n    const { data } = await getApiClient().get(\n      `/storage/conversations/${conversationId}/files`,\n      { params },\n    );\n    return data;\n  },\n\n  async getMyFiles(params: { page?: number; limit?: number } = {}): Promise<PaginatedResponse<FileResponse>> {\n    const { data } = await getApiClient().get('/storage/my-files', { params });\n    return data;\n  },\n};\n\nasync function runMultipartUpload(\n  presigned: PresignedUrlResponse,\n  file: UploadableFile,\n  platformUploadPartFn: PlatformUploadPartFn,\n  onProgress?: (pct: number) => void,\n): Promise<FileResponse> {\n  const { multipart } = presigned;\n  if (!multipart) throw new Error('No multipart info on presigned response');\n\n  const CONCURRENCY = 3;\n  const completedParts: CompletedPart[] = [];\n  const partProgress: Record<number, number> = {};\n\n  multipart.partUrls.forEach(({ partNumber }) => { partProgress[partNumber] = 0; });\n\n  const reportProgress = () => {\n    if (!onProgress) return;\n    const vals = Object.values(partProgress);\n    const avg = vals.reduce((s, v) => s + v, 0) / Math.max(vals.length, 1);\n    onProgress(Math.round(avg * 0.95));\n  };\n\n  const uploadPart = async (partNumber: number, uploadUrl: string, method: 'PUT' | 'POST'): Promise<void> => {\n    const offset = (partNumber - 1) * multipart.chunkSize;\n    const end = Math.min(offset + multipart.chunkSize, file.size);\n    const blob = await fetch(file.uri).then((r) => r.blob());\n    const slice = blob.slice(offset, end);\n\n    const etag = await platformUploadPartFn(uploadUrl, slice, (pct) => {\n      partProgress[partNumber] = pct;\n      reportProgress();\n    }, method);\n\n    completedParts.push({ partNumber, etag });\n    partProgress[partNumber] = 100;\n    reportProgress();\n  };\n\n  for (let i = 0; i < multipart.partUrls.length; i += CONCURRENCY) {\n    const batch = multipart.partUrls.slice(i, i + CONCURRENCY);\n    const results = await Promise.allSettled(\n      batch.map(({ partNumber, uploadUrl, method }) => uploadPart(partNumber, uploadUrl, method ?? 'PUT')),\n    );\n    const failed = results.find((r) => r.status === 'rejected') as PromiseRejectedResult | undefined;\n    if (failed) throw failed.reason;\n  }\n\n  completedParts.sort((a, b) => a.partNumber - b.partNumber);\n\n  const fileResponse = await storageApi.completeMultipartUpload(\n    presigned.fileId,\n    multipart.uploadId,\n    completedParts,\n  );\n  onProgress?.(100);\n  return fileResponse;\n}\n\n/**\n * Core upload implementation. Returns the public BatchUploadResult plus a\n * slotId → FileResponse map that useChat hooks use internally to match\n * confirmed uploads back to optimistic UI slots by position rather than\n * filename. The slotToFile map is never part of the public API.\n */\nasync function runUploadBatch(\n  files: UploadableFile[],\n  platformUploadFn: PlatformUploadFn,\n  slotIds: string[],\n  conversationId?: string,\n  onProgress?: (pct: number) => void,\n  platformCompressFn?: PlatformCompressFn,\n  compressionConfig?: ResolvedCompressionConfig,\n  platformUploadPartFn?: PlatformUploadPartFn,\n): Promise<{ result: BatchUploadResult; slotToFile: Map<string, FileResponse> }> {\n  // Compress all files first (no-ops for unsupported types or when disabled)\n  const compressedFiles = await Promise.all(\n    files.map((f) => compressFile(f, platformCompressFn, compressionConfig ?? { enabled: false, imageQuality: 0.85, imageMaxDimension: 1920, compressDocuments: true })),\n  );\n\n  // Pair each compressed file with its slot ID and a clientIndex.\n  // clientIndex is sent to the server and echoed back in both urls and errors,\n  // giving us a reliable position mapping regardless of which files fail.\n  const slotted = compressedFiles.map((f, i) => ({ file: f, slotId: slotIds[i], clientIndex: i }));\n\n  const requests: PresignedUrlRequest[] = slotted.map(({ file: f, clientIndex }) => ({\n    filename: f.name,\n    mimeType: f.type,\n    size: f.size,\n    conversationId,\n    clientIndex,\n    ...(f.compressed && {\n      metadata: {\n        compressed: f.compressed,\n        originalSize: f.originalSize,\n        compressionAlgorithm: f.compressionAlgorithm,\n      },\n    }),\n  }));\n\n  const { urls, errors: requestErrors } = await storageApi.requestPresignedUrlBatch(requests);\n\n  // Use the echoed clientIndex to identify which original slots failed.\n  // This is reliable even for same-named files and any failure pattern.\n  const failedSlotIds = new Set<string>();\n  const failed: Array<{ filename: string; error: string }> = requestErrors.map((e) => {\n    const idx = e.clientIndex ?? slotted.findIndex((s) => s.file.name === e.filename);\n    const slotId = slotted[idx]?.slotId;\n    if (slotId) failedSlotIds.add(slotId);\n    return { filename: e.filename, error: e.error };\n  });\n\n  // Map each presigned URL back to its original slot via clientIndex.\n  const progressMap: Record<number, number> = {};\n  const reportProgress = () => {\n    if (!onProgress) return;\n    const vals = Object.values(progressMap);\n    const avg = vals.reduce((s, v) => s + v, 0) / Math.max(vals.length, 1);\n    onProgress(Math.round(avg));\n  };\n\n  const successful: FileResponse[] = [];\n  const slotToFile = new Map<string, FileResponse>();\n\n  await Promise.all(\n    urls.map(async (presigned, idx) => {\n      // Resolve the original slot via echoed clientIndex; fall back to position\n      // in urls[] only if the server didn't echo it (older server version).\n      const originalIdx = presigned.clientIndex ?? idx;\n      const { file, slotId } = slotted[originalIdx];\n      progressMap[originalIdx] = 0;\n      try {\n        let fileResponse: FileResponse;\n        if (presigned.multipart && platformUploadPartFn) {\n          fileResponse = await runMultipartUpload(presigned, file, platformUploadPartFn, (pct) => {\n            progressMap[originalIdx] = pct;\n            reportProgress();\n          });\n        } else {\n          await platformUploadFn(presigned, file, (pct) => {\n            progressMap[originalIdx] = Math.round(pct * 0.9);\n            reportProgress();\n          });\n          fileResponse = await storageApi.confirmUpload(presigned.fileId);\n        }\n        progressMap[originalIdx] = 100;\n        reportProgress();\n        successful.push(fileResponse);\n        slotToFile.set(slotId, fileResponse);\n      } catch (err) {\n        failed.push({ filename: file.name, error: (err as Error).message });\n      }\n    }),\n  );\n\n  return { result: { successful, failed }, slotToFile };\n}\n\n/** Public API — returns standard BatchUploadResult, slot tracking is internal. */\nexport async function uploadBatch(\n  files: UploadableFile[],\n  platformUploadFn: PlatformUploadFn,\n  conversationId?: string,\n  onProgress?: (pct: number) => void,\n  platformCompressFn?: PlatformCompressFn,\n  compressionConfig?: ResolvedCompressionConfig,\n  platformUploadPartFn?: PlatformUploadPartFn,\n): Promise<BatchUploadResult> {\n  const slotIds = files.map(() => generateUUID());\n  const { result } = await runUploadBatch(files, platformUploadFn, slotIds, conversationId, onProgress, platformCompressFn, compressionConfig, platformUploadPartFn);\n  return result;\n}\n\n/**\n * Used only by useChat hooks (web + RN) to get the slotId → FileResponse map\n * for matching confirmed uploads back to optimistic UI slots.\n * Not exported from the package index — internal SDK use only.\n */\nexport async function uploadBatchWithSlots(\n  files: UploadableFile[],\n  platformUploadFn: PlatformUploadFn,\n  slotIds: string[],\n  conversationId?: string,\n  onProgress?: (pct: number) => void,\n  platformCompressFn?: PlatformCompressFn,\n  compressionConfig?: ResolvedCompressionConfig,\n  platformUploadPartFn?: PlatformUploadPartFn,\n): Promise<{ result: BatchUploadResult; slotToFile: Map<string, FileResponse> }> {\n  return runUploadBatch(files, platformUploadFn, slotIds, conversationId, onProgress, platformCompressFn, compressionConfig, platformUploadPartFn);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACIA,IAAM,kBAAkB,oBAAI,IAAI;AAAA,EAC9B;AAAA,EAAc;AAAA,EAAY;AAAA,EAAiB;AAAA,EAC3C;AAAA,EAAY;AAAA,EAAmB;AAAA,EAAa;AAAA,EAC5C;AAAA,EAAsB;AAAA,EAAmB;AAAA,EACzC;AAAA,EAAoB;AACtB,CAAC;AAED,IAAM,mBAAmB,oBAAI,IAAI;AAAA,EAC/B;AAAA,EAAc;AAAA,EAAa;AAAA,EAAa;AAAA,EAAc;AAAA,EAAa;AACrE,CAAC;AAGD,IAAM,kBAAkB,oBAAI,IAAI;AAAA,EAC9B;AAAA,EAAa;AAAA,EAAc;AAAA,EAC3B;AAAA,EAAc;AAAA,EAAa;AAAA,EAAa;AAAA,EAAc;AAAA,EACtD;AAAA,EAAmB;AAAA,EACnB;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAIM,SAAS,uBACd,UACA,QACqB;AACrB,MAAI,gBAAgB,IAAI,QAAQ,EAAG,QAAO;AAC1C,MAAI,iBAAiB,IAAI,QAAQ,EAAG,QAAO;AAC3C,MAAI,OAAO,qBAAqB,gBAAgB,IAAI,QAAQ,EAAG,QAAO;AACtE,SAAO;AACT;AAOA,eAAsB,aACpB,MACA,oBACA,QACyB;AACzB,QAAM,OAAuB;AAAA,IAC3B,GAAG;AAAA,IACH,cAAc,KAAK;AAAA,IACnB,YAAY;AAAA,IACZ,sBAAsB;AAAA,EACxB;AAEA,MAAI,CAAC,OAAO,WAAW,CAAC,mBAAoB,QAAO;AAEnD,QAAM,WAAW,uBAAuB,KAAK,MAAM,MAAM;AACzD,MAAI,aAAa,OAAQ,QAAO;AAEhC,MAAI;AACF,WAAO,MAAM,mBAAmB,MAAM,MAAM;AAAA,EAC9C,QAAQ;AAEN,WAAO;AAAA,EACT;AACF;;;ACjEA,IAAAA,gBAGO;;;ACHP,mBAA6B;;;ADuR7B,IAAI,YAAkC;AAM/B,SAAS,eAA8B;AAC5C,MAAI,CAAC,UAAW,OAAM,IAAI,MAAM,kEAAkE;AAClG,SAAO;AACT;;;AE9RO,SAAS,eAAuB;AACrC,MAAI,OAAO,WAAW,QAAQ,eAAe,YAAY;AACvD,WAAO,WAAW,OAAO,WAAW;AAAA,EACtC;AACA,SAAO,uCAAuC,QAAQ,SAAS,CAAC,MAAM;AACpE,UAAM,IAAK,KAAK,OAAO,IAAI,KAAM;AACjC,YAAQ,MAAM,MAAM,IAAK,IAAI,IAAO,GAAK,SAAS,EAAE;AAAA,EACtD,CAAC;AACH;;;ACKO,IAAM,aAAa;AAAA,EACxB,MAAM,oBAAoB,SAA6D;AACrF,UAAM,EAAE,KAAK,IAAI,MAAM,aAAa,EAAE,KAA2B,0BAA0B,OAAO;AAClG,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,yBAAyB,OAG5B;AACD,UAAM,EAAE,KAAK,IAAI,MAAM,aAAa,EAAE,KAAK,gCAAgC,EAAE,MAAM,CAAC;AACpF,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,cAAc,QAAuC;AACzD,UAAM,EAAE,KAAK,IAAI,MAAM,aAAa,EAAE,KAAmB,oBAAoB,MAAM,EAAE;AACrF,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,QAAQ,QAAuC;AACnD,UAAM,EAAE,KAAK,IAAI,MAAM,aAAa,EAAE,IAAkB,kBAAkB,MAAM,EAAE;AAClF,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,WAAW,QAAgB,WAAiE;AAChG,UAAM,EAAE,KAAK,IAAI,MAAM,aAAa,EAAE,IAAI,kBAAkB,MAAM,QAAQ;AAAA,MACxE,QAAQ,YAAY,EAAE,UAAU,IAAI,CAAC;AAAA,IACvC,CAAC;AACD,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,WAAW,QAA+B;AAC9C,UAAM,aAAa,EAAE,KAAK,kBAAkB,MAAM,SAAS;AAAA,EAC7D;AAAA,EAEA,MAAM,wBACJ,QACA,UACA,OACuB;AACvB,UAAM,EAAE,KAAK,IAAI,MAAM,aAAa,EAAE;AAAA,MACpC,+BAA+B,MAAM;AAAA,MACrC,EAAE,UAAU,MAAM;AAAA,IACpB;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,qBACJ,gBACA,SAA6D,CAAC,GACpB;AAC1C,UAAM,EAAE,KAAK,IAAI,MAAM,aAAa,EAAE;AAAA,MACpC,0BAA0B,cAAc;AAAA,MACxC,EAAE,OAAO;AAAA,IACX;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,WAAW,SAA4C,CAAC,GAA6C;AACzG,UAAM,EAAE,KAAK,IAAI,MAAM,aAAa,EAAE,IAAI,qBAAqB,EAAE,OAAO,CAAC;AACzE,WAAO;AAAA,EACT;AACF;AAEA,eAAe,mBACb,WACA,MACA,sBACA,YACuB;AACvB,QAAM,EAAE,UAAU,IAAI;AACtB,MAAI,CAAC,UAAW,OAAM,IAAI,MAAM,yCAAyC;AAEzE,QAAM,cAAc;AACpB,QAAM,iBAAkC,CAAC;AACzC,QAAM,eAAuC,CAAC;AAE9C,YAAU,SAAS,QAAQ,CAAC,EAAE,WAAW,MAAM;AAAE,iBAAa,UAAU,IAAI;AAAA,EAAG,CAAC;AAEhF,QAAM,iBAAiB,MAAM;AAC3B,QAAI,CAAC,WAAY;AACjB,UAAM,OAAO,OAAO,OAAO,YAAY;AACvC,UAAM,MAAM,KAAK,OAAO,CAAC,GAAG,MAAM,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,KAAK,QAAQ,CAAC;AACrE,eAAW,KAAK,MAAM,MAAM,IAAI,CAAC;AAAA,EACnC;AAEA,QAAM,aAAa,OAAO,YAAoB,WAAmB,WAA0C;AACzG,UAAM,UAAU,aAAa,KAAK,UAAU;AAC5C,UAAM,MAAM,KAAK,IAAI,SAAS,UAAU,WAAW,KAAK,IAAI;AAC5D,UAAM,OAAO,MAAM,MAAM,KAAK,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC;AACvD,UAAM,QAAQ,KAAK,MAAM,QAAQ,GAAG;AAEpC,UAAM,OAAO,MAAM,qBAAqB,WAAW,OAAO,CAAC,QAAQ;AACjE,mBAAa,UAAU,IAAI;AAC3B,qBAAe;AAAA,IACjB,GAAG,MAAM;AAET,mBAAe,KAAK,EAAE,YAAY,KAAK,CAAC;AACxC,iBAAa,UAAU,IAAI;AAC3B,mBAAe;AAAA,EACjB;AAEA,WAAS,IAAI,GAAG,IAAI,UAAU,SAAS,QAAQ,KAAK,aAAa;AAC/D,UAAM,QAAQ,UAAU,SAAS,MAAM,GAAG,IAAI,WAAW;AACzD,UAAM,UAAU,MAAM,QAAQ;AAAA,MAC5B,MAAM,IAAI,CAAC,EAAE,YAAY,WAAW,OAAO,MAAM,WAAW,YAAY,WAAW,UAAU,KAAK,CAAC;AAAA,IACrG;AACA,UAAM,SAAS,QAAQ,KAAK,CAAC,MAAM,EAAE,WAAW,UAAU;AAC1D,QAAI,OAAQ,OAAM,OAAO;AAAA,EAC3B;AAEA,iBAAe,KAAK,CAAC,GAAG,MAAM,EAAE,aAAa,EAAE,UAAU;AAEzD,QAAM,eAAe,MAAM,WAAW;AAAA,IACpC,UAAU;AAAA,IACV,UAAU;AAAA,IACV;AAAA,EACF;AACA,eAAa,GAAG;AAChB,SAAO;AACT;AAQA,eAAe,eACb,OACA,kBACA,SACA,gBACA,YACA,oBACA,mBACA,sBAC+E;AAE/E,QAAM,kBAAkB,MAAM,QAAQ;AAAA,IACpC,MAAM,IAAI,CAAC,MAAM,aAAa,GAAG,oBAAoB,qBAAqB,EAAE,SAAS,OAAO,cAAc,MAAM,mBAAmB,MAAM,mBAAmB,KAAK,CAAC,CAAC;AAAA,EACrK;AAKA,QAAM,UAAU,gBAAgB,IAAI,CAAC,GAAG,OAAO,EAAE,MAAM,GAAG,QAAQ,QAAQ,CAAC,GAAG,aAAa,EAAE,EAAE;AAE/F,QAAM,WAAkC,QAAQ,IAAI,CAAC,EAAE,MAAM,GAAG,YAAY,OAAO;AAAA,IACjF,UAAU,EAAE;AAAA,IACZ,UAAU,EAAE;AAAA,IACZ,MAAM,EAAE;AAAA,IACR;AAAA,IACA;AAAA,IACA,GAAI,EAAE,cAAc;AAAA,MAClB,UAAU;AAAA,QACR,YAAY,EAAE;AAAA,QACd,cAAc,EAAE;AAAA,QAChB,sBAAsB,EAAE;AAAA,MAC1B;AAAA,IACF;AAAA,EACF,EAAE;AAEF,QAAM,EAAE,MAAM,QAAQ,cAAc,IAAI,MAAM,WAAW,yBAAyB,QAAQ;AAI1F,QAAM,gBAAgB,oBAAI,IAAY;AACtC,QAAM,SAAqD,cAAc,IAAI,CAAC,MAAM;AAClF,UAAM,MAAM,EAAE,eAAe,QAAQ,UAAU,CAAC,MAAM,EAAE,KAAK,SAAS,EAAE,QAAQ;AAChF,UAAM,SAAS,QAAQ,GAAG,GAAG;AAC7B,QAAI,OAAQ,eAAc,IAAI,MAAM;AACpC,WAAO,EAAE,UAAU,EAAE,UAAU,OAAO,EAAE,MAAM;AAAA,EAChD,CAAC;AAGD,QAAM,cAAsC,CAAC;AAC7C,QAAM,iBAAiB,MAAM;AAC3B,QAAI,CAAC,WAAY;AACjB,UAAM,OAAO,OAAO,OAAO,WAAW;AACtC,UAAM,MAAM,KAAK,OAAO,CAAC,GAAG,MAAM,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,KAAK,QAAQ,CAAC;AACrE,eAAW,KAAK,MAAM,GAAG,CAAC;AAAA,EAC5B;AAEA,QAAM,aAA6B,CAAC;AACpC,QAAM,aAAa,oBAAI,IAA0B;AAEjD,QAAM,QAAQ;AAAA,IACZ,KAAK,IAAI,OAAO,WAAW,QAAQ;AAGjC,YAAM,cAAc,UAAU,eAAe;AAC7C,YAAM,EAAE,MAAM,OAAO,IAAI,QAAQ,WAAW;AAC5C,kBAAY,WAAW,IAAI;AAC3B,UAAI;AACF,YAAI;AACJ,YAAI,UAAU,aAAa,sBAAsB;AAC/C,yBAAe,MAAM,mBAAmB,WAAW,MAAM,sBAAsB,CAAC,QAAQ;AACtF,wBAAY,WAAW,IAAI;AAC3B,2BAAe;AAAA,UACjB,CAAC;AAAA,QACH,OAAO;AACL,gBAAM,iBAAiB,WAAW,MAAM,CAAC,QAAQ;AAC/C,wBAAY,WAAW,IAAI,KAAK,MAAM,MAAM,GAAG;AAC/C,2BAAe;AAAA,UACjB,CAAC;AACD,yBAAe,MAAM,WAAW,cAAc,UAAU,MAAM;AAAA,QAChE;AACA,oBAAY,WAAW,IAAI;AAC3B,uBAAe;AACf,mBAAW,KAAK,YAAY;AAC5B,mBAAW,IAAI,QAAQ,YAAY;AAAA,MACrC,SAAS,KAAK;AACZ,eAAO,KAAK,EAAE,UAAU,KAAK,MAAM,OAAQ,IAAc,QAAQ,CAAC;AAAA,MACpE;AAAA,IACF,CAAC;AAAA,EACH;AAEA,SAAO,EAAE,QAAQ,EAAE,YAAY,OAAO,GAAG,WAAW;AACtD;AAsBA,eAAsB,qBACpB,OACA,kBACA,SACA,gBACA,YACA,oBACA,mBACA,sBAC+E;AAC/E,SAAO,eAAe,OAAO,kBAAkB,SAAS,gBAAgB,YAAY,oBAAoB,mBAAmB,oBAAoB;AACjJ;","names":["import_axios"]}
+{"version":3,"sources":["../src/internal.ts","../src/compression/compress.ts","../src/api/client.ts","../src/errors.ts","../src/crypto/uuid.ts","../src/api/storage.ts"],"sourcesContent":["// Internal exports for use by the web and RN SDKs only.\n// Not part of the public API — do not use in application code.\nexport { uploadBatchWithSlots } from './api/storage.js';\nexport { generateUUID } from './crypto/uuid.js';\n","import type { UploadableFile, CompressedFile, CompressionAlgorithm } from '../types/index.js';\nimport type { PlatformCompressFn, ResolvedCompressionConfig } from '../config/types.js';\n\n// MIME types that benefit from gzip (text-based, not already compressed)\nconst GZIP_MIME_TYPES = new Set([\n  'text/plain', 'text/csv', 'text/markdown', 'text/x-markdown',\n  'text/xml', 'application/xml', 'text/yaml', 'text/x-yaml',\n  'application/x-yaml', 'application/rtf', 'text/rtf',\n  'application/json', 'image/svg+xml',\n]);\n\nconst IMAGE_MIME_TYPES = new Set([\n  'image/jpeg', 'image/png', 'image/gif', 'image/webp', 'image/bmp', 'image/tiff',\n]);\n\n// Already-compressed formats — no gain from recompressing\nconst SKIP_MIME_TYPES = new Set([\n  'video/mp4', 'video/webm', 'video/quicktime',\n  'audio/mpeg', 'audio/wav', 'audio/ogg', 'audio/webm', 'audio/mp4',\n  'application/zip', 'application/pdf',\n  'application/vnd.openxmlformats-officedocument.wordprocessingml.document',\n  'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet',\n  'application/vnd.openxmlformats-officedocument.presentationml.presentation',\n]);\n\nexport type CompressionStrategy = 'image' | 'gzip' | 'skip';\n\nexport function getCompressionStrategy(\n  mimeType: string,\n  config: ResolvedCompressionConfig,\n): CompressionStrategy {\n  if (SKIP_MIME_TYPES.has(mimeType)) return 'skip';\n  if (IMAGE_MIME_TYPES.has(mimeType)) return 'image';\n  if (config.compressDocuments && GZIP_MIME_TYPES.has(mimeType)) return 'gzip';\n  return 'skip';\n}\n\n/**\n * Attempt to compress a file using the platform-provided compressor.\n * Returns the original file unchanged (as a CompressedFile with compressed=false)\n * if compression is disabled, no compressor is provided, or the strategy is 'skip'.\n */\nexport async function compressFile(\n  file: UploadableFile,\n  platformCompressFn: PlatformCompressFn | undefined,\n  config: ResolvedCompressionConfig,\n): Promise<CompressedFile> {\n  const noop: CompressedFile = {\n    ...file,\n    originalSize: file.size,\n    compressed: false,\n    compressionAlgorithm: 'none' as CompressionAlgorithm,\n  };\n\n  if (!config.enabled || !platformCompressFn) return noop;\n\n  const strategy = getCompressionStrategy(file.type, config);\n  if (strategy === 'skip') return noop;\n\n  try {\n    return await platformCompressFn(file, config);\n  } catch {\n    // Compression failure is non-fatal — fall back to original\n    return noop;\n  }\n}\n","import axios, {\n  AxiosInstance,\n  InternalAxiosRequestConfig,\n} from 'axios';\nimport type { ResolvedConfig } from '../config/types.js';\nimport type { AuthTokens } from '../types/index.js';\nimport { encryptPayload, decryptPayload, isTransitEnvelope } from '../crypto/transit.js';\nimport { getSessionKey, getSessionId, isTransitEnabled, awaitTransitReadyOr, configureTransit, setTransitSession, getTransitSession } from '../crypto/session.js';\nimport { createRestTransitSession, fetchServerKeys, TransitRateLimitedError } from '../crypto/handshake.js';\nimport { detectTransitAlgo } from '../crypto/detect.js';\nimport { normalizeAxiosError, AntzChatNetworkError } from '../errors.js';\n\n// Hard ceiling on how long a single request will block waiting for the transit\n// handshake. A legitimate cold-start handshake resolves in well under this even\n// on a slow link (TransitGate already spent ~6s, establishTransit keeps\n// retrying). Past this we FAIL the request with a retryable error rather than\n// leave it pending forever — react-query cannot retry / refetch-on-focus a\n// request that never settles, so an unbounded wait here is an unrecoverable\n// silent hang. Each failed+retried request also re-arms ensureRestTransitHandshake.\nconst TRANSIT_GATE_MAX_WAIT_MS = 30_000;\n\nexport type TokenStore = {\n  getAccessToken: () => string | null | undefined;\n  getRefreshToken: () => string | null | undefined;\n  setTokens: (tokens: AuthTokens) => void;\n  clearTokens: () => void;\n};\n\nlet _tokenStore: TokenStore | null = null;\nlet _config: ResolvedConfig | null = null;\nlet _avatarSent = false;\n// In-flight transit handshake promise — shared between initApiClient and connectSocket\n// so they never fire two concurrent HTTPS handshakes for the same session.\nlet _transitHandshakePromise: Promise<void> | null = null;\n// Gate the request interceptor until the SDK has resolved a token (async\n// authProvider) and, where wired, the transit handshake. Set by the SDK\n// provider; the interceptor awaits it before attaching the Authorization\n// header so early requests (e.g. useConversations' initial fetch) don't race\n// ahead unauthenticated.\nlet _authReadyPromise: Promise<unknown> | null = null;\n\nexport function getTransitHandshakePromise(): Promise<void> | null {\n  return _transitHandshakePromise;\n}\n\nexport function setAuthReadyPromise(promise: Promise<unknown> | null): void {\n  _authReadyPromise = promise;\n}\n\n// True once initApiClient() has run and its config has not been torn down by a\n// subsequent disconnectSocket(). Lets the SDK provider detect the case where a\n// React remount skipped re-init (its key was unchanged) but disconnectSocket()\n// had nulled _config in between — leaving the request interceptor unable to see\n// transitEncryption and firing every request as unencrypted plaintext.\nexport function isApiClientConfigured(): boolean {\n  return _config !== null;\n}\n\n// (Re-)kick the HTTPS transit handshake. Idempotent: no-ops when transit is\n// disabled, a session already exists, or an attempt is already in flight.\n// Called both at init and from the request interceptor when a request is about\n// to block on waitForTransitReady() with no session — e.g. after a socket\n// disconnect cleared the session and nothing else re-established it.\n//\n// It only calls configureTransit(false) — which un-gates the interceptor and\n// lets requests go out as PLAINTEXT — when the server itself reports transit\n// disabled (GET /crypto/pubkey → enabled:false, i.e. an old server). A transient\n// failure of POST /crypto/session (network blip, rate limit, 5xx) must NOT\n// disable transit: the server still requires it, so plaintext would just 403.\n// Instead we retry with backoff; waitForTransitReady() keeps requests pending\n// and they dispatch the moment a retry sets the session.\nexport function ensureRestTransitHandshake(): void {\n  if (!_config?.transitEncryption || getTransitSession() || _transitHandshakePromise) return;\n  const apiUrl = _config.apiUrl;\n  _transitHandshakePromise = (async () => {\n    try {\n      // A 429 is \"wait\", not \"broken\", so it must NOT consume the attempt\n      // budget — otherwise a rate-limited client exhausts 5 attempts in a few\n      // seconds and gives up on an endpoint that was working fine. Failures are\n      // counted separately from rate-limit hits, and the loop is additionally\n      // bounded by wall-clock time so a persistently limited server cannot keep\n      // it running forever.\n      const MAX_FAILURES = 5;\n      const BACKSTOP_MS = 2 * 60_000;\n      const deadline = Date.now() + BACKSTOP_MS;\n      let failures = 0;\n      let rateLimitHits = 0;\n\n      while (failures < MAX_FAILURES && Date.now() < deadline) {\n        if (getTransitSession()) return;\n        let waitMs: number;\n        try {\n          // Identity is sent so the server can rate-limit these pre-auth routes\n          // per user rather than per IP (see TransitIdentity in handshake.ts).\n          const identity = { userId: _config?.userId, tenantId: _config?.tenantId };\n          const keys = await fetchServerKeys(apiUrl, identity);\n          if (!keys?.enabled) {\n            configureTransit(false); // server genuinely doesn't want transit\n            return;\n          }\n          const session = await createRestTransitSession(apiUrl, identity);\n          if (session && !getTransitSession()) {\n            const algo = typeof globalThis.crypto?.subtle !== 'undefined'\n              ? await detectTransitAlgo()\n              : 'x25519';\n            setTransitSession({ sessionKey: session.sessionKey as CryptoKey, algo, sessionId: session.sessionId, enabled: true });\n            return;\n          }\n          // Reachable when the server returned no session but did not throw\n          // (e.g. an old server without the endpoint) — treat as a failure.\n          failures++;\n          waitMs = Math.min(500 * 2 ** failures, 8_000);\n        } catch (err) {\n          if (err instanceof TransitRateLimitedError) {\n            // Honour the server's own figure when it sent one (clamped to a\n            // sane 1-60s), else escalate blind since the window is unknown.\n            const blind = Math.min(15_000 * 2 ** rateLimitHits, 60_000);\n            waitMs = err.retryAfterMs != null\n              ? Math.min(Math.max(err.retryAfterMs, 1_000), 60_000)\n              : blind;\n            rateLimitHits++;\n            console.warn(\n              `[AntzChat] transit handshake rate-limited (429) — retrying in ${Math.round(waitMs / 1000)}s` +\n                `${err.retryAfterMs != null ? ' (per Retry-After)' : ''}.`,\n            );\n          } else {\n            failures++;\n            waitMs = Math.min(500 * 2 ** failures, 8_000);\n          }\n        }\n        await new Promise((r) => setTimeout(r, waitMs));\n      }\n      console.error(\n        '[AntzChat] transit handshake could not establish a session — ' +\n          \"chat requests stay gated until one succeeds (server requires transit).\",\n      );\n    } finally {\n      _transitHandshakePromise = null;\n    }\n  })();\n}\n\nexport function initApiClient(config: ResolvedConfig, tokenStore: TokenStore): AxiosInstance {\n  _config = config;\n  _tokenStore = tokenStore;\n  _avatarSent = false; // reset on re-init (new session / authToken change)\n\n  const client = axios.create({\n    baseURL: config.apiUrl,\n    headers: { 'Content-Type': 'application/json' },\n  });\n\n  // Configure transit as early as possible — before any requests fire —\n  // so waitForTransitReady() in the interceptor knows whether to block or not.\n  configureTransit(config.transitEncryption);\n\n  // Kick off the HTTPS transit handshake immediately so REST calls that fire\n  // before connectSocket (e.g. getMe() right after initApiClient) are not\n  // blocked indefinitely. Store the promise so connectSocket can await it\n  // instead of firing a duplicate handshake.\n  ensureRestTransitHandshake();\n\n  // ── Request interceptor ──────────────────────────────────────────────────\n  client.interceptors.request.use(async (req: InternalAxiosRequestConfig) => {\n    // Wait for the SDK's auth (and, where wired, transit) gate before reading\n    // the token — otherwise a request fired during boot goes out with no\n    // Authorization header.\n    if (_authReadyPromise) await _authReadyPromise;\n\n    const token = _tokenStore?.getAccessToken();\n    if (token) req.headers['Authorization'] = `Bearer ${token}`;\n    if (_config?.userId)   req.headers['x-user-id']   = _config.userId;\n    if (_config?.tenantId) req.headers['X-Tenant-ID'] = _config.tenantId;\n    // Send avatar on the first request only — server hashes and deduplicates\n    if (token && !_avatarSent && _config?.avatar) {\n      if (_config.avatar.base64) req.headers['x-avatar-base64'] = _config.avatar.base64;\n      else if (_config.avatar.url) req.headers['x-avatar-url'] = _config.avatar.url;\n      _avatarSent = true;\n    }\n\n    // Wait for the transit session key before sending any request. The server\n    // enforces transit encryption independent of auth (e.g. GET /app/config\n    // fires before the async authProvider token resolves) — gating this on\n    // `token` let those pre-auth requests race ahead of the handshake and get\n    // rejected with 403 \"Transit encryption required\".\n    if (_config?.transitEncryption) {\n      // If the session is gone (socket disconnect cleared it, first boot still\n      // pending), make sure a handshake is running before we block — otherwise\n      // the wait could hang with nothing to resolve it.\n      if (!getTransitSession()) ensureRestTransitHandshake();\n      const ready = await awaitTransitReadyOr(TRANSIT_GATE_MAX_WAIT_MS);\n      if (!ready) {\n        // Handshake still hasn't produced a session. Do NOT send plaintext\n        // (server requires transit); fail loudly instead so the error surfaces\n        // in the UI and react-query's retry re-drives the handshake.\n        throw new AntzChatNetworkError(\n          'Secure channel to chat server not established — request not sent. It will retry automatically.',\n          'TRANSIT_NOT_READY',\n          { url: req.url },\n        );\n      }\n    }\n\n    if (isTransitEnabled()) {\n      const sessionId = getSessionId();\n      const key = getSessionKey();\n      if (sessionId && key) {\n        req.headers['x-transit-session'] = sessionId;\n        if (req.data !== undefined && req.data !== null) {\n          const envelope = await encryptPayload(req.data, key);\n          req.data = envelope;\n          req.headers['x-transit-encrypted'] = '1';\n        }\n      }\n    }\n\n    return req;\n  });\n\n  let isRefreshing = false;\n  let refreshQueue: Array<(token: string) => void> = [];\n\n  // ── Response interceptor ─────────────────────────────────────────────────\n  client.interceptors.response.use(\n    async (response) => {\n      // Transit decryption — server wraps encrypted payload inside { success, data: <envelope> }.\n      // Decrypt the inner envelope, then let the standard unwrap below handle { success, data }.\n      if (isTransitEnabled()) {\n        const key = getSessionKey();\n        if (key) {\n          // Case 1: entire response is the envelope (unlikely but handle it)\n          if (isTransitEnvelope(response.data)) {\n            response.data = await decryptPayload(response.data, key);\n          }\n          // Case 2: envelope is nested inside { success, data: <envelope> }\n          else if (response.data?.data && isTransitEnvelope(response.data.data)) {\n            response.data.data = await decryptPayload(response.data.data, key);\n          }\n        }\n      }\n\n      // Standard { success, data } unwrap\n      if (\n        response.data &&\n        typeof response.data === 'object' &&\n        'success' in response.data &&\n        'data' in response.data\n      ) {\n        response.data = response.data.data;\n      }\n      return response;\n    },\n    async (error) => {\n      // Decrypt error response body — error filter encrypts it too\n      if (isTransitEnabled() && error.response?.data) {\n        const key = getSessionKey();\n        if (key) {\n          try {\n            if (isTransitEnvelope(error.response.data)) {\n              error.response.data = await decryptPayload(error.response.data, key);\n            } else if (error.response.data?.data && isTransitEnvelope(error.response.data.data)) {\n              error.response.data.data = await decryptPayload(error.response.data.data, key);\n            }\n          } catch { /* decryption failed — leave as-is */ }\n        }\n      }\n\n      const original = error.config as InternalAxiosRequestConfig & { _retry?: boolean };\n\n      if (error.response?.status === 401 && !original._retry) {\n        const refreshToken = _tokenStore?.getRefreshToken();\n        if (!refreshToken) {\n          _tokenStore?.clearTokens();\n          return Promise.reject(normalizeAxiosError(error));\n        }\n\n        if (isRefreshing) {\n          return new Promise((resolve) => {\n            refreshQueue.push((newToken) => {\n              original.headers['Authorization'] = `Bearer ${newToken}`;\n              resolve(client(original));\n            });\n          });\n        }\n\n        original._retry = true;\n        isRefreshing = true;\n\n        try {\n          const { data } = await axios.post<{ data: AuthTokens }>(\n            `${_config!.apiUrl}/auth/refresh`,\n            { refreshToken },\n          );\n          const tokens: AuthTokens = (data as any).data ?? data;\n          _tokenStore?.setTokens(tokens);\n          refreshQueue.forEach((cb) => cb(tokens.accessToken));\n          refreshQueue = [];\n          original.headers['Authorization'] = `Bearer ${tokens.accessToken}`;\n          return client(original);\n        } catch {\n          _tokenStore?.clearTokens();\n          return Promise.reject(normalizeAxiosError(error));\n        } finally {\n          isRefreshing = false;\n        }\n      }\n\n      return Promise.reject(normalizeAxiosError(error));\n    },\n  );\n\n  return client;\n}\n\nlet _instance: AxiosInstance | null = null;\n\nexport function setApiClientInstance(instance: AxiosInstance) {\n  _instance = instance;\n}\n\nexport function getApiClient(): AxiosInstance {\n  if (!_instance) throw new Error('[AntzChat] API client not initialized. Call initApiClient first.');\n  return _instance;\n}\n","import { isAxiosError } from 'axios';\nimport { isTransitEnvelope } from './crypto/transit.js';\n\n// ─── Base error class ─────────────────────────────────────────────────────────\n\nexport class AntzChatError extends Error {\n  readonly code: string;\n  readonly retryable: boolean;\n  readonly context?: Record<string, unknown>;\n\n  constructor(\n    code: string,\n    message: string,\n    retryable = false,\n    context?: Record<string, unknown>,\n  ) {\n    super(message);\n    this.name = 'AntzChatError';\n    this.code = code;\n    this.retryable = retryable;\n    this.context = context;\n    // Maintain proper prototype chain in transpiled environments\n    Object.setPrototypeOf(this, new.target.prototype);\n  }\n}\n\n// ─── Semantic subclasses ──────────────────────────────────────────────────────\n\n/** Thrown on 401 (after refresh also fails) or when no refresh token exists. */\nexport class AntzChatAuthError extends AntzChatError {\n  constructor(message: string, code = 'AUTH_FAILED', context?: Record<string, unknown>) {\n    super(code, message, false, context);\n    this.name = 'AntzChatAuthError';\n    Object.setPrototypeOf(this, new.target.prototype);\n  }\n}\n\n/** Thrown on 400 / 422 — bad input, validation failure. */\nexport class AntzChatValidationError extends AntzChatError {\n  /** Server-returned field error array (when the server sends message as string[]). */\n  readonly fields?: string[];\n\n  constructor(message: string | string[], context?: Record<string, unknown>) {\n    const msg = Array.isArray(message) ? message.join('; ') : message;\n    super('VALIDATION_ERROR', msg, false, context);\n    this.name = 'AntzChatValidationError';\n    this.fields = Array.isArray(message) ? message : undefined;\n    Object.setPrototypeOf(this, new.target.prototype);\n  }\n}\n\n/** Thrown on network failures, timeouts, socket disconnections, and queue overflow. retryable = true. */\nexport class AntzChatNetworkError extends AntzChatError {\n  constructor(message: string, code = 'NETWORK_ERROR', context?: Record<string, unknown>) {\n    super(code, message, true, context);\n    this.name = 'AntzChatNetworkError';\n    Object.setPrototypeOf(this, new.target.prototype);\n  }\n}\n\n/** Thrown on 403 — insufficient permissions. */\nexport class AntzChatPermissionError extends AntzChatError {\n  constructor(message: string, context?: Record<string, unknown>) {\n    super('PERMISSION_DENIED', message, false, context);\n    this.name = 'AntzChatPermissionError';\n    Object.setPrototypeOf(this, new.target.prototype);\n  }\n}\n\n/** Thrown on 5xx or other unexpected server errors. retryable = true. */\nexport class AntzChatServerError extends AntzChatError {\n  readonly httpStatus?: number;\n\n  constructor(message: string, httpStatus?: number, context?: Record<string, unknown>) {\n    super('SERVER_ERROR', message, true, context);\n    this.name = 'AntzChatServerError';\n    this.httpStatus = httpStatus;\n    Object.setPrototypeOf(this, new.target.prototype);\n  }\n}\n\n// ─── Error code reference ─────────────────────────────────────────────────────\n//\n//  Code                    Class                        Source\n//  ─────────────────────   ────────────────────────     ─────────────────────────\n//  AUTH_FAILED             AntzChatAuthError            401 after refresh fails\n//  SESSION_EXPIRED         AntzChatAuthError            401, no refresh token\n//  PERMISSION_DENIED       AntzChatPermissionError      403\n//  VALIDATION_ERROR        AntzChatValidationError      400 / 422\n//  NOT_FOUND               AntzChatServerError          404\n//  RATE_LIMITED            AntzChatNetworkError         429\n//  NETWORK_ERROR           AntzChatNetworkError         No response / conn failure\n//  SOCKET_TIMEOUT          AntzChatNetworkError         ACK timeout / reconnect timeout\n//  SOCKET_NOT_CONNECTED    AntzChatNetworkError         withAck when socket is down\n//  SEND_QUEUE_FULL         AntzChatNetworkError         Queue overflow (>100 msgs)\n//  MESSAGE_DROPPED         AntzChatNetworkError         Queue TTL expired (30s)\n//  TRANSIT_MISMATCH        AntzChatError                SDK/server encryption config mismatch\n//  SERVER_ERROR            AntzChatServerError          5xx or unknown HTTP error\n\n// ─── REST error normaliser ────────────────────────────────────────────────────\n\n/**\n * Converts a raw axios error (or any unknown throw) into a typed AntzChatError.\n *\n * Call site: client.ts response interceptor — runs AFTER transit decryption,\n * so error.response.data is always plaintext by the time this function sees it.\n * If decryption itself failed, error.response.data remains the raw encrypted\n * envelope — detected via isTransitEnvelope() and noted in context.\n */\nexport function normalizeAxiosError(error: unknown): AntzChatError {\n  if (error instanceof AntzChatError) return error;\n\n  if (isAxiosError(error)) {\n    const status = error.response?.status;\n    const body   = error.response?.data;\n\n    // Detect if decryption failed — body is still an encrypted envelope\n    const decryptionFailed = body != null && isTransitEnvelope(body);\n\n    const rawMessage: string | string[] | undefined = decryptionFailed\n      ? undefined\n      : (body?.message ?? undefined);\n\n    const message: string =\n      (Array.isArray(rawMessage) ? rawMessage.join('; ') : rawMessage) ||\n      error.message ||\n      'Request failed';\n\n    const ctx: Record<string, unknown> = {\n      ...(status          != null && { httpStatus: status }),\n      ...(body?.path      != null && { path: body.path }),\n      ...(body?.error     != null && { serverError: body.error }),\n      ...(error.code      != null && { axiosCode: error.code }),\n      ...(decryptionFailed        && { decryptionFailed: true, note: 'Transit decryption failed — server error body is an encrypted envelope' }),\n    };\n\n    // No response at all — network/timeout failure\n    if (!error.response) {\n      return new AntzChatNetworkError(message || 'Network error', 'NETWORK_ERROR', ctx);\n    }\n\n    if (status === 401) {\n      // AUTH_FAILED is used when a refresh was attempted but failed (set by interceptor).\n      // SESSION_EXPIRED is the default: 401 with no prior retry = token simply expired.\n      const code = (error.config as any)?._retry ? 'AUTH_FAILED' : 'SESSION_EXPIRED';\n      return new AntzChatAuthError(message, code, ctx);\n    }\n    if (status === 403) return new AntzChatPermissionError(message, ctx);\n    if (status === 400 || status === 422) {\n      return new AntzChatValidationError(\n        Array.isArray(rawMessage) ? rawMessage : message,\n        ctx,\n      );\n    }\n    if (status === 404) return new AntzChatServerError(message, 404, ctx);\n    if (status === 429) return new AntzChatNetworkError(message, 'RATE_LIMITED', ctx);\n    if (status != null && status >= 500) return new AntzChatServerError(message, status, ctx);\n\n    return new AntzChatServerError(message, status, ctx);\n  }\n\n  const msg = error instanceof Error ? error.message : String(error);\n  return new AntzChatError('UNKNOWN_ERROR', msg, false);\n}\n","// crypto.randomUUID() doesn't exist in React Native's Hermes engine.\n// Fall back to a RFC 4122 v4 UUID built from Math.random() when unavailable.\nexport function generateUUID(): string {\n  if (typeof globalThis.crypto?.randomUUID === 'function') {\n    return globalThis.crypto.randomUUID();\n  }\n  return 'xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx'.replace(/[xy]/g, (c) => {\n    const r = (Math.random() * 16) | 0;\n    return (c === 'x' ? r : (r & 0x3) | 0x8).toString(16);\n  });\n}\n","import type {\n  BatchUploadResult,\n  FileResponse,\n  PaginatedResponse,\n  PresignedUrlRequest,\n  PresignedUrlResponse,\n  FileType,\n  UploadableFile,\n  CompletedPart,\n} from '../types/index.js';\nimport type { PlatformUploadFn, PlatformCompressFn, PlatformUploadPartFn, ResolvedCompressionConfig } from '../config/types.js';\nimport { compressFile } from '../compression/compress.js';\nimport { getApiClient } from './client.js';\nimport { generateUUID } from '../crypto/uuid.js';\n\nexport const storageApi = {\n  async requestPresignedUrl(payload: PresignedUrlRequest): Promise<PresignedUrlResponse> {\n    const { data } = await getApiClient().post<PresignedUrlResponse>('/storage/presigned-url', payload);\n    return data;\n  },\n\n  async requestPresignedUrlBatch(files: PresignedUrlRequest[]): Promise<{\n    urls: PresignedUrlResponse[];\n    errors: Array<{ filename: string; error: string; clientIndex?: number }>;\n  }> {\n    const { data } = await getApiClient().post('/storage/presigned-url/batch', { files });\n    return data;\n  },\n\n  async confirmUpload(fileId: string): Promise<FileResponse> {\n    const { data } = await getApiClient().post<FileResponse>(`/storage/confirm/${fileId}`);\n    return data;\n  },\n\n  async getFile(fileId: string): Promise<FileResponse> {\n    const { data } = await getApiClient().get<FileResponse>(`/storage/files/${fileId}`);\n    return data;\n  },\n\n  async getFileUrl(fileId: string, expiresIn?: number): Promise<{ url: string; expiresAt: string }> {\n    const { data } = await getApiClient().get(`/storage/files/${fileId}/url`, {\n      params: expiresIn ? { expiresIn } : {},\n    });\n    return data;\n  },\n\n  async deleteFile(fileId: string): Promise<void> {\n    await getApiClient().post(`/storage/files/${fileId}/delete`);\n  },\n\n  async completeMultipartUpload(\n    fileId: string,\n    uploadId: string,\n    parts: CompletedPart[],\n  ): Promise<FileResponse> {\n    const { data } = await getApiClient().post<FileResponse>(\n      `/storage/multipart/complete/${fileId}`,\n      { uploadId, parts },\n    );\n    return data;\n  },\n\n  async getConversationFiles(\n    conversationId: string,\n    params: { page?: number; limit?: number; type?: FileType } = {},\n  ): Promise<PaginatedResponse<FileResponse>> {\n    const { data } = await getApiClient().get(\n      `/storage/conversations/${conversationId}/files`,\n      { params },\n    );\n    return data;\n  },\n\n  async getMyFiles(params: { page?: number; limit?: number } = {}): Promise<PaginatedResponse<FileResponse>> {\n    const { data } = await getApiClient().get('/storage/my-files', { params });\n    return data;\n  },\n};\n\nasync function runMultipartUpload(\n  presigned: PresignedUrlResponse,\n  file: UploadableFile,\n  platformUploadPartFn: PlatformUploadPartFn,\n  onProgress?: (pct: number) => void,\n): Promise<FileResponse> {\n  const { multipart } = presigned;\n  if (!multipart) throw new Error('No multipart info on presigned response');\n\n  const CONCURRENCY = 3;\n  const completedParts: CompletedPart[] = [];\n  const partProgress: Record<number, number> = {};\n\n  multipart.partUrls.forEach(({ partNumber }) => { partProgress[partNumber] = 0; });\n\n  const reportProgress = () => {\n    if (!onProgress) return;\n    const vals = Object.values(partProgress);\n    const avg = vals.reduce((s, v) => s + v, 0) / Math.max(vals.length, 1);\n    onProgress(Math.round(avg * 0.95));\n  };\n\n  const uploadPart = async (partNumber: number, uploadUrl: string, method: 'PUT' | 'POST'): Promise<void> => {\n    const offset = (partNumber - 1) * multipart.chunkSize;\n    const end = Math.min(offset + multipart.chunkSize, file.size);\n    const blob = await fetch(file.uri).then((r) => r.blob());\n    const slice = blob.slice(offset, end);\n\n    const etag = await platformUploadPartFn(uploadUrl, slice, (pct) => {\n      partProgress[partNumber] = pct;\n      reportProgress();\n    }, method);\n\n    completedParts.push({ partNumber, etag });\n    partProgress[partNumber] = 100;\n    reportProgress();\n  };\n\n  for (let i = 0; i < multipart.partUrls.length; i += CONCURRENCY) {\n    const batch = multipart.partUrls.slice(i, i + CONCURRENCY);\n    const results = await Promise.allSettled(\n      batch.map(({ partNumber, uploadUrl, method }) => uploadPart(partNumber, uploadUrl, method ?? 'PUT')),\n    );\n    const failed = results.find((r) => r.status === 'rejected') as PromiseRejectedResult | undefined;\n    if (failed) throw failed.reason;\n  }\n\n  completedParts.sort((a, b) => a.partNumber - b.partNumber);\n\n  const fileResponse = await storageApi.completeMultipartUpload(\n    presigned.fileId,\n    multipart.uploadId,\n    completedParts,\n  );\n  onProgress?.(100);\n  return fileResponse;\n}\n\n/**\n * Core upload implementation. Returns the public BatchUploadResult plus a\n * slotId → FileResponse map that useChat hooks use internally to match\n * confirmed uploads back to optimistic UI slots by position rather than\n * filename. The slotToFile map is never part of the public API.\n */\nasync function runUploadBatch(\n  files: UploadableFile[],\n  platformUploadFn: PlatformUploadFn,\n  slotIds: string[],\n  conversationId?: string,\n  onProgress?: (pct: number) => void,\n  platformCompressFn?: PlatformCompressFn,\n  compressionConfig?: ResolvedCompressionConfig,\n  platformUploadPartFn?: PlatformUploadPartFn,\n): Promise<{ result: BatchUploadResult; slotToFile: Map<string, FileResponse> }> {\n  // Compress all files first (no-ops for unsupported types or when disabled)\n  const compressedFiles = await Promise.all(\n    files.map((f) => compressFile(f, platformCompressFn, compressionConfig ?? { enabled: false, imageQuality: 0.85, imageMaxDimension: 1920, compressDocuments: true })),\n  );\n\n  // Pair each compressed file with its slot ID and a clientIndex.\n  // clientIndex is sent to the server and echoed back in both urls and errors,\n  // giving us a reliable position mapping regardless of which files fail.\n  const slotted = compressedFiles.map((f, i) => ({ file: f, slotId: slotIds[i], clientIndex: i }));\n\n  const requests: PresignedUrlRequest[] = slotted.map(({ file: f, clientIndex }) => ({\n    filename: f.name,\n    mimeType: f.type,\n    size: f.size,\n    conversationId,\n    clientIndex,\n    ...(f.compressed && {\n      metadata: {\n        compressed: f.compressed,\n        originalSize: f.originalSize,\n        compressionAlgorithm: f.compressionAlgorithm,\n      },\n    }),\n  }));\n\n  const { urls, errors: requestErrors } = await storageApi.requestPresignedUrlBatch(requests);\n\n  // Use the echoed clientIndex to identify which original slots failed.\n  // This is reliable even for same-named files and any failure pattern.\n  const failedSlotIds = new Set<string>();\n  const failed: Array<{ filename: string; error: string }> = requestErrors.map((e) => {\n    const idx = e.clientIndex ?? slotted.findIndex((s) => s.file.name === e.filename);\n    const slotId = slotted[idx]?.slotId;\n    if (slotId) failedSlotIds.add(slotId);\n    return { filename: e.filename, error: e.error };\n  });\n\n  // Map each presigned URL back to its original slot via clientIndex.\n  const progressMap: Record<number, number> = {};\n  const reportProgress = () => {\n    if (!onProgress) return;\n    const vals = Object.values(progressMap);\n    const avg = vals.reduce((s, v) => s + v, 0) / Math.max(vals.length, 1);\n    onProgress(Math.round(avg));\n  };\n\n  const successful: FileResponse[] = [];\n  const slotToFile = new Map<string, FileResponse>();\n\n  await Promise.all(\n    urls.map(async (presigned, idx) => {\n      // Resolve the original slot via echoed clientIndex; fall back to position\n      // in urls[] only if the server didn't echo it (older server version).\n      const originalIdx = presigned.clientIndex ?? idx;\n      const { file, slotId } = slotted[originalIdx];\n      progressMap[originalIdx] = 0;\n      try {\n        let fileResponse: FileResponse;\n        if (presigned.multipart && platformUploadPartFn) {\n          fileResponse = await runMultipartUpload(presigned, file, platformUploadPartFn, (pct) => {\n            progressMap[originalIdx] = pct;\n            reportProgress();\n          });\n        } else {\n          await platformUploadFn(presigned, file, (pct) => {\n            progressMap[originalIdx] = Math.round(pct * 0.9);\n            reportProgress();\n          });\n          fileResponse = await storageApi.confirmUpload(presigned.fileId);\n        }\n        progressMap[originalIdx] = 100;\n        reportProgress();\n        successful.push(fileResponse);\n        slotToFile.set(slotId, fileResponse);\n      } catch (err) {\n        failed.push({ filename: file.name, error: (err as Error).message });\n      }\n    }),\n  );\n\n  return { result: { successful, failed }, slotToFile };\n}\n\n/** Public API — returns standard BatchUploadResult, slot tracking is internal. */\nexport async function uploadBatch(\n  files: UploadableFile[],\n  platformUploadFn: PlatformUploadFn,\n  conversationId?: string,\n  onProgress?: (pct: number) => void,\n  platformCompressFn?: PlatformCompressFn,\n  compressionConfig?: ResolvedCompressionConfig,\n  platformUploadPartFn?: PlatformUploadPartFn,\n): Promise<BatchUploadResult> {\n  const slotIds = files.map(() => generateUUID());\n  const { result } = await runUploadBatch(files, platformUploadFn, slotIds, conversationId, onProgress, platformCompressFn, compressionConfig, platformUploadPartFn);\n  return result;\n}\n\n/**\n * Used only by useChat hooks (web + RN) to get the slotId → FileResponse map\n * for matching confirmed uploads back to optimistic UI slots.\n * Not exported from the package index — internal SDK use only.\n */\nexport async function uploadBatchWithSlots(\n  files: UploadableFile[],\n  platformUploadFn: PlatformUploadFn,\n  slotIds: string[],\n  conversationId?: string,\n  onProgress?: (pct: number) => void,\n  platformCompressFn?: PlatformCompressFn,\n  compressionConfig?: ResolvedCompressionConfig,\n  platformUploadPartFn?: PlatformUploadPartFn,\n): Promise<{ result: BatchUploadResult; slotToFile: Map<string, FileResponse> }> {\n  return runUploadBatch(files, platformUploadFn, slotIds, conversationId, onProgress, platformCompressFn, compressionConfig, platformUploadPartFn);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACIA,IAAM,kBAAkB,oBAAI,IAAI;AAAA,EAC9B;AAAA,EAAc;AAAA,EAAY;AAAA,EAAiB;AAAA,EAC3C;AAAA,EAAY;AAAA,EAAmB;AAAA,EAAa;AAAA,EAC5C;AAAA,EAAsB;AAAA,EAAmB;AAAA,EACzC;AAAA,EAAoB;AACtB,CAAC;AAED,IAAM,mBAAmB,oBAAI,IAAI;AAAA,EAC/B;AAAA,EAAc;AAAA,EAAa;AAAA,EAAa;AAAA,EAAc;AAAA,EAAa;AACrE,CAAC;AAGD,IAAM,kBAAkB,oBAAI,IAAI;AAAA,EAC9B;AAAA,EAAa;AAAA,EAAc;AAAA,EAC3B;AAAA,EAAc;AAAA,EAAa;AAAA,EAAa;AAAA,EAAc;AAAA,EACtD;AAAA,EAAmB;AAAA,EACnB;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAIM,SAAS,uBACd,UACA,QACqB;AACrB,MAAI,gBAAgB,IAAI,QAAQ,EAAG,QAAO;AAC1C,MAAI,iBAAiB,IAAI,QAAQ,EAAG,QAAO;AAC3C,MAAI,OAAO,qBAAqB,gBAAgB,IAAI,QAAQ,EAAG,QAAO;AACtE,SAAO;AACT;AAOA,eAAsB,aACpB,MACA,oBACA,QACyB;AACzB,QAAM,OAAuB;AAAA,IAC3B,GAAG;AAAA,IACH,cAAc,KAAK;AAAA,IACnB,YAAY;AAAA,IACZ,sBAAsB;AAAA,EACxB;AAEA,MAAI,CAAC,OAAO,WAAW,CAAC,mBAAoB,QAAO;AAEnD,QAAM,WAAW,uBAAuB,KAAK,MAAM,MAAM;AACzD,MAAI,aAAa,OAAQ,QAAO;AAEhC,MAAI;AACF,WAAO,MAAM,mBAAmB,MAAM,MAAM;AAAA,EAC9C,QAAQ;AAEN,WAAO;AAAA,EACT;AACF;;;ACjEA,IAAAA,gBAGO;;;ACHP,mBAA6B;;;AD0T7B,IAAI,YAAkC;AAM/B,SAAS,eAA8B;AAC5C,MAAI,CAAC,UAAW,OAAM,IAAI,MAAM,kEAAkE;AAClG,SAAO;AACT;;;AEjUO,SAAS,eAAuB;AACrC,MAAI,OAAO,WAAW,QAAQ,eAAe,YAAY;AACvD,WAAO,WAAW,OAAO,WAAW;AAAA,EACtC;AACA,SAAO,uCAAuC,QAAQ,SAAS,CAAC,MAAM;AACpE,UAAM,IAAK,KAAK,OAAO,IAAI,KAAM;AACjC,YAAQ,MAAM,MAAM,IAAK,IAAI,IAAO,GAAK,SAAS,EAAE;AAAA,EACtD,CAAC;AACH;;;ACKO,IAAM,aAAa;AAAA,EACxB,MAAM,oBAAoB,SAA6D;AACrF,UAAM,EAAE,KAAK,IAAI,MAAM,aAAa,EAAE,KAA2B,0BAA0B,OAAO;AAClG,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,yBAAyB,OAG5B;AACD,UAAM,EAAE,KAAK,IAAI,MAAM,aAAa,EAAE,KAAK,gCAAgC,EAAE,MAAM,CAAC;AACpF,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,cAAc,QAAuC;AACzD,UAAM,EAAE,KAAK,IAAI,MAAM,aAAa,EAAE,KAAmB,oBAAoB,MAAM,EAAE;AACrF,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,QAAQ,QAAuC;AACnD,UAAM,EAAE,KAAK,IAAI,MAAM,aAAa,EAAE,IAAkB,kBAAkB,MAAM,EAAE;AAClF,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,WAAW,QAAgB,WAAiE;AAChG,UAAM,EAAE,KAAK,IAAI,MAAM,aAAa,EAAE,IAAI,kBAAkB,MAAM,QAAQ;AAAA,MACxE,QAAQ,YAAY,EAAE,UAAU,IAAI,CAAC;AAAA,IACvC,CAAC;AACD,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,WAAW,QAA+B;AAC9C,UAAM,aAAa,EAAE,KAAK,kBAAkB,MAAM,SAAS;AAAA,EAC7D;AAAA,EAEA,MAAM,wBACJ,QACA,UACA,OACuB;AACvB,UAAM,EAAE,KAAK,IAAI,MAAM,aAAa,EAAE;AAAA,MACpC,+BAA+B,MAAM;AAAA,MACrC,EAAE,UAAU,MAAM;AAAA,IACpB;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,qBACJ,gBACA,SAA6D,CAAC,GACpB;AAC1C,UAAM,EAAE,KAAK,IAAI,MAAM,aAAa,EAAE;AAAA,MACpC,0BAA0B,cAAc;AAAA,MACxC,EAAE,OAAO;AAAA,IACX;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,WAAW,SAA4C,CAAC,GAA6C;AACzG,UAAM,EAAE,KAAK,IAAI,MAAM,aAAa,EAAE,IAAI,qBAAqB,EAAE,OAAO,CAAC;AACzE,WAAO;AAAA,EACT;AACF;AAEA,eAAe,mBACb,WACA,MACA,sBACA,YACuB;AACvB,QAAM,EAAE,UAAU,IAAI;AACtB,MAAI,CAAC,UAAW,OAAM,IAAI,MAAM,yCAAyC;AAEzE,QAAM,cAAc;AACpB,QAAM,iBAAkC,CAAC;AACzC,QAAM,eAAuC,CAAC;AAE9C,YAAU,SAAS,QAAQ,CAAC,EAAE,WAAW,MAAM;AAAE,iBAAa,UAAU,IAAI;AAAA,EAAG,CAAC;AAEhF,QAAM,iBAAiB,MAAM;AAC3B,QAAI,CAAC,WAAY;AACjB,UAAM,OAAO,OAAO,OAAO,YAAY;AACvC,UAAM,MAAM,KAAK,OAAO,CAAC,GAAG,MAAM,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,KAAK,QAAQ,CAAC;AACrE,eAAW,KAAK,MAAM,MAAM,IAAI,CAAC;AAAA,EACnC;AAEA,QAAM,aAAa,OAAO,YAAoB,WAAmB,WAA0C;AACzG,UAAM,UAAU,aAAa,KAAK,UAAU;AAC5C,UAAM,MAAM,KAAK,IAAI,SAAS,UAAU,WAAW,KAAK,IAAI;AAC5D,UAAM,OAAO,MAAM,MAAM,KAAK,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC;AACvD,UAAM,QAAQ,KAAK,MAAM,QAAQ,GAAG;AAEpC,UAAM,OAAO,MAAM,qBAAqB,WAAW,OAAO,CAAC,QAAQ;AACjE,mBAAa,UAAU,IAAI;AAC3B,qBAAe;AAAA,IACjB,GAAG,MAAM;AAET,mBAAe,KAAK,EAAE,YAAY,KAAK,CAAC;AACxC,iBAAa,UAAU,IAAI;AAC3B,mBAAe;AAAA,EACjB;AAEA,WAAS,IAAI,GAAG,IAAI,UAAU,SAAS,QAAQ,KAAK,aAAa;AAC/D,UAAM,QAAQ,UAAU,SAAS,MAAM,GAAG,IAAI,WAAW;AACzD,UAAM,UAAU,MAAM,QAAQ;AAAA,MAC5B,MAAM,IAAI,CAAC,EAAE,YAAY,WAAW,OAAO,MAAM,WAAW,YAAY,WAAW,UAAU,KAAK,CAAC;AAAA,IACrG;AACA,UAAM,SAAS,QAAQ,KAAK,CAAC,MAAM,EAAE,WAAW,UAAU;AAC1D,QAAI,OAAQ,OAAM,OAAO;AAAA,EAC3B;AAEA,iBAAe,KAAK,CAAC,GAAG,MAAM,EAAE,aAAa,EAAE,UAAU;AAEzD,QAAM,eAAe,MAAM,WAAW;AAAA,IACpC,UAAU;AAAA,IACV,UAAU;AAAA,IACV;AAAA,EACF;AACA,eAAa,GAAG;AAChB,SAAO;AACT;AAQA,eAAe,eACb,OACA,kBACA,SACA,gBACA,YACA,oBACA,mBACA,sBAC+E;AAE/E,QAAM,kBAAkB,MAAM,QAAQ;AAAA,IACpC,MAAM,IAAI,CAAC,MAAM,aAAa,GAAG,oBAAoB,qBAAqB,EAAE,SAAS,OAAO,cAAc,MAAM,mBAAmB,MAAM,mBAAmB,KAAK,CAAC,CAAC;AAAA,EACrK;AAKA,QAAM,UAAU,gBAAgB,IAAI,CAAC,GAAG,OAAO,EAAE,MAAM,GAAG,QAAQ,QAAQ,CAAC,GAAG,aAAa,EAAE,EAAE;AAE/F,QAAM,WAAkC,QAAQ,IAAI,CAAC,EAAE,MAAM,GAAG,YAAY,OAAO;AAAA,IACjF,UAAU,EAAE;AAAA,IACZ,UAAU,EAAE;AAAA,IACZ,MAAM,EAAE;AAAA,IACR;AAAA,IACA;AAAA,IACA,GAAI,EAAE,cAAc;AAAA,MAClB,UAAU;AAAA,QACR,YAAY,EAAE;AAAA,QACd,cAAc,EAAE;AAAA,QAChB,sBAAsB,EAAE;AAAA,MAC1B;AAAA,IACF;AAAA,EACF,EAAE;AAEF,QAAM,EAAE,MAAM,QAAQ,cAAc,IAAI,MAAM,WAAW,yBAAyB,QAAQ;AAI1F,QAAM,gBAAgB,oBAAI,IAAY;AACtC,QAAM,SAAqD,cAAc,IAAI,CAAC,MAAM;AAClF,UAAM,MAAM,EAAE,eAAe,QAAQ,UAAU,CAAC,MAAM,EAAE,KAAK,SAAS,EAAE,QAAQ;AAChF,UAAM,SAAS,QAAQ,GAAG,GAAG;AAC7B,QAAI,OAAQ,eAAc,IAAI,MAAM;AACpC,WAAO,EAAE,UAAU,EAAE,UAAU,OAAO,EAAE,MAAM;AAAA,EAChD,CAAC;AAGD,QAAM,cAAsC,CAAC;AAC7C,QAAM,iBAAiB,MAAM;AAC3B,QAAI,CAAC,WAAY;AACjB,UAAM,OAAO,OAAO,OAAO,WAAW;AACtC,UAAM,MAAM,KAAK,OAAO,CAAC,GAAG,MAAM,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,KAAK,QAAQ,CAAC;AACrE,eAAW,KAAK,MAAM,GAAG,CAAC;AAAA,EAC5B;AAEA,QAAM,aAA6B,CAAC;AACpC,QAAM,aAAa,oBAAI,IAA0B;AAEjD,QAAM,QAAQ;AAAA,IACZ,KAAK,IAAI,OAAO,WAAW,QAAQ;AAGjC,YAAM,cAAc,UAAU,eAAe;AAC7C,YAAM,EAAE,MAAM,OAAO,IAAI,QAAQ,WAAW;AAC5C,kBAAY,WAAW,IAAI;AAC3B,UAAI;AACF,YAAI;AACJ,YAAI,UAAU,aAAa,sBAAsB;AAC/C,yBAAe,MAAM,mBAAmB,WAAW,MAAM,sBAAsB,CAAC,QAAQ;AACtF,wBAAY,WAAW,IAAI;AAC3B,2BAAe;AAAA,UACjB,CAAC;AAAA,QACH,OAAO;AACL,gBAAM,iBAAiB,WAAW,MAAM,CAAC,QAAQ;AAC/C,wBAAY,WAAW,IAAI,KAAK,MAAM,MAAM,GAAG;AAC/C,2BAAe;AAAA,UACjB,CAAC;AACD,yBAAe,MAAM,WAAW,cAAc,UAAU,MAAM;AAAA,QAChE;AACA,oBAAY,WAAW,IAAI;AAC3B,uBAAe;AACf,mBAAW,KAAK,YAAY;AAC5B,mBAAW,IAAI,QAAQ,YAAY;AAAA,MACrC,SAAS,KAAK;AACZ,eAAO,KAAK,EAAE,UAAU,KAAK,MAAM,OAAQ,IAAc,QAAQ,CAAC;AAAA,MACpE;AAAA,IACF,CAAC;AAAA,EACH;AAEA,SAAO,EAAE,QAAQ,EAAE,YAAY,OAAO,GAAG,WAAW;AACtD;AAsBA,eAAsB,qBACpB,OACA,kBACA,SACA,gBACA,YACA,oBACA,mBACA,sBAC+E;AAC/E,SAAO,eAAe,OAAO,kBAAkB,SAAS,gBAAgB,YAAY,oBAAoB,mBAAmB,oBAAoB;AACjJ;","names":["import_axios"]}

package/dist/internal.js

@@ -1,7 +1,7 @@
 import {
   generateUUID,
   uploadBatchWithSlots
-} from "./chunk-WUNH3UTE.js";
+} from "./chunk-U637W5MD.js";
 export {
   generateUUID,
   uploadBatchWithSlots

package/docs/integration-guide.html

@@ -155,7 +155,7 @@ section.sec>h2:hover{color:#fff}
 
   <div class="section-label">What's New</div>
   <ul>
-    <li><a href="#whats-new">v1.4.4 Release Notes</a></li>
+    <li><a href="#whats-new">v1.4.5 Release Notes</a></li>
   </ul>
 
   <div class="section-label">Getting Started</div>
@@ -251,12 +251,158 @@ section.sec>h2:hover{color:#fff}
   <h2>What's New</h2>
   <p style="color:var(--muted);font-size:13px;margin-bottom:20px">Version history and release notes. Click a version to expand.</p>
 
-  <!-- ── v1.4.4 (current) ── -->
+  <!-- ── v1.4.5 (current) ── -->
+  <div class="wn-version open" id="wn-145">
+    <div class="wn-header" onclick="toggleVersion('wn-145')">
+      <div class="wn-title">
+        <span class="wn-ver">v1.4.5</span>
+        <span class="wn-badge current">Current</span>
+        <span class="wn-date">September 2026</span>
+      </div>
+      <span class="wn-chevron">&#9650;</span>
+    </div>
+    <div class="wn-body">
+      <div class="callout info"><strong>Version note.</strong> This release was built and reviewed internally as <code>1.4.7</code>; it is published as <code>1.4.5</code> to fit the antz_contact_center Verdaccio pin. They are the same code &mdash; there is no <code>1.4.6</code>, and no separate <code>1.4.7</code> will be published.</div>
+
+      <p>One theme runs through this release: <strong>transit encryption must never silently degrade to plaintext.</strong> Every fix below closes a path where the SDK either sent an unencrypted request the server was guaranteed to reject with <code>403 "Transit encryption required"</code>, or hung forever on a handshake nothing was driving.</p>
+
+      <div class="wn-item" id="wn-145-transit">
+        <div class="wn-item-header" onclick="toggleItem('wn-145-transit')">
+          <span class="wn-tag fix">Fix</span>
+          <span class="wn-item-title">Transit session survives a socket drop &mdash; no more "chat dies until I reload the page"</span>
+          <span class="wn-chevron-sm">&#9662;</span>
+        </div>
+        <div class="wn-item-body">
+          <p>The socket <code>disconnect</code> handler called <code>clearTransitSession()</code> on <em>every</em> websocket drop &mdash; a network hiccup, a backgrounded tab, a server redeploy. The REST transit session is independent of the socket transport, so wiping it there made every subsequent chat REST call fail with <code>403 "Transit encryption required"</code> until a full page reload.</p>
+          <p><strong>Fix:</strong> the session is now torn down only on an explicit <code>disconnectSocket()</code> or an auth change. socket.io's auto-reconnect re-runs the handshake auth and the server re-emits <code>transit_session</code>, which replaces the key through the persistent listener.</p>
+          <p>This was the most user-visible bug in 1.4.4: <em>"chat stops working after the laptop sleeps or the tab sits in the background, and only a reload fixes it."</em></p>
+        </div>
+      </div>
+
+      <div class="wn-item" id="wn-145-state">
+        <div class="wn-item-header" onclick="toggleItem('wn-145-state')">
+          <span class="wn-tag fix">Fix</span>
+          <span class="wn-item-title">Transit state can no longer contradict itself and 403 forever</span>
+          <span class="wn-chevron-sm">&#9662;</span>
+        </div>
+        <div class="wn-item-body">
+          <p><code>clearTransitSession()</code> deliberately left <code>sessionEverEstablished = true</code>, which put two readers into permanent disagreement: <code>waitForTransitReady()</code> trusted the flag and returned "don't block", while <code>isTransitEnabled()</code> checked the live session and returned "don't encrypt". Requests then went out unencrypted, 403'd forever, and had no path back to a working state. The flag now resets alongside the session.</p>
+        </div>
+      </div>
+
+      <div class="wn-item" id="wn-145-timeout">
+        <div class="wn-item-header" onclick="toggleItem('wn-145-timeout')">
+          <span class="wn-tag fix">Fix</span>
+          <span class="wn-item-title">A slow handshake no longer disables transit for the whole session</span>
+          <span class="wn-chevron-sm">&#9662;</span>
+        </div>
+        <div class="wn-item-body">
+          <p>The 5s <code>transit_session</code> safety timeout called <code>configureTransit(false)</code>, converting a transient stall into plaintext for every later REST request <em>and</em> socket emit. A timeout means "slow right now", not "the server doesn't want transit" &mdash; the only authoritative off signal is <code>GET /crypto/pubkey</code> returning <code>enabled: false</code>. The timeout now stops blocking that one connect attempt, logs, and leaves transit required while the retry paths keep working.</p>
+        </div>
+      </div>
+
+      <div class="wn-item" id="wn-145-preauth">
+        <div class="wn-item-header" onclick="toggleItem('wn-145-preauth')">
+          <span class="wn-tag fix">Fix</span>
+          <span class="wn-item-title">Pre-auth requests no longer race the handshake</span>
+          <span class="wn-chevron-sm">&#9662;</span>
+        </div>
+        <div class="wn-item-body">
+          <p>The request interceptor gated its transit wait on the presence of an auth token, so unauthenticated calls &mdash; <code>GET /app/config</code> firing before an async <code>authProvider</code> resolves &mdash; skipped the wait and were rejected with <code>403 "Transit encryption required"</code>. The server enforces transit independent of auth, so the gate now keys off whether transit encryption is <em>configured</em>, not whether a token is present.</p>
+        </div>
+      </div>
+
+      <div class="wn-item" id="wn-145-joinroom">
+        <div class="wn-item-header" onclick="toggleItem('wn-145-joinroom')">
+          <span class="wn-tag fix">Fix</span>
+          <span class="wn-item-title">A dropped join_room no longer silently stops message delivery</span>
+          <span class="wn-chevron-sm">&#9662;</span>
+        </div>
+        <div class="wn-item-body">
+          <p><code>join_room</code> is fire-and-forget and the UI emits it once per conversation open. One dropped during the transit-handshake gap, or lost on a plain socket reconnect, left the client outside the server-side room with no error and no retry &mdash; <code>new_message</code> broadcasts for that conversation simply never arrived.</p>
+          <p><strong>Fix:</strong> the SDK now tracks the rooms it believes it is in and re-emits <code>join_room</code> for all of them whenever a transit session (re-)establishes or the socket reconnects. Server-side join is idempotent, and a stale room (the user is no longer a member) is rejected server-side and swallowed.</p>
+        </div>
+      </div>
+
+      <div class="wn-item" id="wn-145-ordering">
+        <div class="wn-item-header" onclick="toggleItem('wn-145-ordering')">
+          <span class="wn-tag improvement">Improvement</span>
+          <span class="wn-item-title">Send ordering preserved without paying server round-trip latency</span>
+          <span class="wn-chevron-sm">&#9662;</span>
+        </div>
+        <div class="wn-item-body">
+          <p>The per-conversation send queue awaited the full server ack before starting the next message. It now awaits only the emit phase (transit wait &rarr; encrypt &rarr; <code>socket.emit</code>), so message N is on the wire before N+1 begins encrypting, while the ack resolves out-of-band and a slow ack never blocks the next send.</p>
+        </div>
+      </div>
+
+      <div class="wn-item" id="wn-145-gate">
+        <div class="wn-item-header" onclick="toggleItem('wn-145-gate')">
+          <span class="wn-tag improvement">Changed</span>
+          <span class="wn-item-title">Requests fail loudly instead of hanging or downgrading &mdash; may require action</span>
+          <span class="wn-chevron-sm">&#9662;</span>
+        </div>
+        <div class="wn-item-body">
+          <p>When transit is required but no session key is available, a REST request waits up to <strong>30 seconds</strong> (<code>TRANSIT_GATE_MAX_WAIT_MS</code>) for an in-flight handshake, then throws a <strong>retryable</strong> <code>AntzChatNetworkError</code> with code <code>TRANSIT_NOT_READY</code>. Socket emits do the same on a 4s budget, deliberately kept under the 5s ack timeout so the caller's own timeout still governs the total wait. Neither path ever falls through to plaintext.</p>
+          <p>The REST handshake also retries itself: <code>ensureRestTransitHandshake()</code> is idempotent and backs off up to 5 times (500ms &rarr; 8s capped). It un-gates to plaintext <em>only</em> when the server authoritatively reports transit disabled; a transient failure of <code>POST /crypto/session</code> (rate limit, 5xx, network blip) keeps transit required and keeps retrying.</p>
+          <div class="callout warn"><strong>Audit your fire-and-forget REST calls.</strong> A call that previously went out as plaintext and returned <code>403</code> now throws instead. If a bootstrap call swallows it &mdash; <code>authApi.getMe().then(...).catch(() =&gt; {})</code> &mdash; auth never resolves, the socket never connects, and the app sits on a loading screen with no visible cause. Either surface the error or retry it; with react-query, key your retry predicate on <code>error.retryable !== false</code>, which <code>AntzChatNetworkError</code> sets to <code>true</code>.</div>
+        </div>
+      </div>
+
+      <div class="wn-item" id="wn-145-onsenderror">
+        <div class="wn-item-header" onclick="toggleItem('wn-145-onsenderror')">
+          <span class="wn-tag new">New</span>
+          <span class="wn-item-title">onSendError config callback &mdash; surface why a message failed to send</span>
+          <span class="wn-chevron-sm">&#9662;</span>
+        </div>
+        <div class="wn-item-body">
+          <p>Fires when a message ultimately fails to send, <em>after</em> the SDK has updated the timeline, so hosts can raise a toast or error banner. The callback is for notification only &mdash; you do not need to remove or flag the bubble yourself.</p>
+<pre><code><span class="at">onSendError</span>: (error, { conversationId, tempId, permanent }) =&gt; {
+  <span class="cm">// permanent: a retry of the identical payload cannot succeed (size/type</span>
+  <span class="cm">// limit, message too long, no longer a participant) — bubble already removed.</span>
+  <span class="cm">// otherwise: transient — the "! Retry" bubble stays in the timeline.</span>
+  <span class="kw">if</span> (permanent) toast.error(error.message);
+  <span class="kw">else</span> toast.warn(<span class="st">'Message not sent — tap Retry on the message.'</span>);
+}</code></pre>
+          <p>New exported type: <code>SendErrorContext</code>. Pair the transient case with <code>useChat().retrySendMessage(messageId)</code> (v1.4.4+) for a retry affordance outside the built-in <code>MessageItem</code>.</p>
+        </div>
+      </div>
+
+      <div class="wn-item" id="wn-145-exports">
+        <div class="wn-item-header" onclick="toggleItem('wn-145-exports')">
+          <span class="wn-tag new">New</span>
+          <span class="wn-item-title">setAuthReadyPromise, resetTrackedRooms, isApiClientConfigured</span>
+          <span class="wn-chevron-sm">&#9662;</span>
+        </div>
+        <div class="wn-item-body">
+          <ul>
+            <li><code>setAuthReadyPromise(promise)</code> &mdash; gate the request interceptor until your host has resolved an auth token (and, where wired, the transit handshake), so a request fired during boot cannot go out without an <code>Authorization</code> header. <code>@antzsoft/chat-web-sdk</code> v1.1.6 wires this for you.</li>
+            <li><code>resetTrackedRooms()</code> &mdash; clears the tracked room set. Call it on a genuine identity change (user or tenant switch) so the reconnect re-flush cannot re-join the previous user's rooms. A token refresh is <em>not</em> an identity change and must not call this.</li>
+            <li><code>isApiClientConfigured()</code> &mdash; reports whether <code>initApiClient()</code> has run, for hosts that need to detect a remount which skipped re-init.</li>
+          </ul>
+        </div>
+      </div>
+
+      <div class="wn-item" id="wn-145-compat">
+        <div class="wn-item-header" onclick="toggleItem('wn-145-compat')">
+          <span class="wn-tag improvement">Compatibility</span>
+          <span class="wn-item-title">Upgrading from v1.4.4</span>
+          <span class="wn-chevron-sm">&#9662;</span>
+        </div>
+        <div class="wn-item-body">
+          <p><strong>Backward compatible at the API level</strong> &mdash; additive exports only, no signature changes, no exports removed, no call-site updates required.</p>
+          <p>The one behavioral change is the transit gate described above: a request made while transit was required but unavailable used to go out as plaintext and come back <code>403</code>; it now waits up to 30s and throws a retryable <code>AntzChatNetworkError</code>. That is strictly better &mdash; recoverable instead of wedged &mdash; but only for callers that handle a rejection.</p>
+          <p>Two react-query combinations deserve a second look: <code>retry: 0</code> (and mutations, which default to no retries) leaves nothing to re-drive the handshake, and <code>staleTime: Infinity</code> together with <code>refetchOnWindowFocus: false</code> means a query that exhausts its retries will not refetch on its own.</p>
+          <p><strong>Also removed:</strong> the internal <code>_preservingSession</code> guard added in v1.4.0. Now that the disconnect handler never clears the session on a transient drop, the guard is unnecessary. Both the transit and non-transit <code>reconnectSocket()</code> paths behave the same as before.</p>
+        </div>
+      </div>
+    </div>
+  </div><!-- /.wn-version -->
+
+  <!-- ── v1.4.4 ── -->
   <div class="wn-version open" id="wn-144">
     <div class="wn-header" onclick="toggleVersion('wn-144')">
       <div class="wn-title">
         <span class="wn-ver">v1.4.4</span>
-        <span class="wn-badge current">Current</span>
         <span class="wn-date">July 2026</span>
       </div>
       <span class="wn-chevron">▲</span>
@@ -435,7 +581,8 @@ section.sec>h2:hover{color:#fff}
         </div>
         <div class="wn-item-body">
           <p><code>reconnectSocket()</code> called <code>socket.connect()</code> to apply a refreshed token while preserving the transit session — but socket.io-client's <code>connect()</code> is a no-op on an already-connected socket. A token refresh fires while the user is actively on a chat screen (socket still connected), so the new auth was never actually sent; the socket kept running on the stale token until the server eventually dropped it, and the disconnect handler then cleared the transit session, desyncing the client's key from the server's — producing continuous <code>"Transit decryption failed for event: user_online"</code>.</p>
-          <p><strong>Fix:</strong> in the transit branch of <code>reconnectSocket()</code>, force a real transport re-cycle (disconnect → connect) so the fresh auth (token + <code>transitSessionId</code>) is actually sent and the server re-links the <em>same</em> session (same key), instead of silently continuing on stale auth. A new internal <code>_preservingSession</code> guard stops the disconnect handler from wiping the key being deliberately carried forward. Non-transit and already-disconnected paths are unchanged.</p>
+          <p><strong>Fix:</strong> in the transit branch of <code>reconnectSocket()</code>, force a real transport re-cycle (disconnect → connect) so the fresh auth (token + <code>transitSessionId</code>) is actually sent and the server re-links the <em>same</em> session (same key), instead of silently continuing on stale auth. Non-transit and already-disconnected paths are unchanged.</p>
+          <div class="callout info"><strong>Superseded in v1.4.5.</strong> This fix originally added an internal <code>_preservingSession</code> guard to stop the disconnect handler from wiping the key being carried through the re-cycle. v1.4.5 removed that guard: the disconnect handler no longer clears the transit session on a transient drop at all, so there is nothing to guard against. The transport re-cycle described above is unchanged.</div>
           <p><strong>Backward compatible.</strong> Only affects transit-encryption deployments that refresh auth tokens while the socket is connected. <strong>No integration changes required</strong> — the fix is entirely internal to <code>reconnectSocket()</code>.</p>
         </div>
       </div>
@@ -4123,26 +4270,39 @@ socket.<span class="fn">on</span>(<span class="str">'message_deleted'</span>, (e
 <!-- ─── STEP 11: TYPING ───────────────────────────────────────────────── -->
 <section id="step-typing">
   <h2><span class="step">STEP 11</span> Typing Indicators</h2>
+  <p><strong>Call <code>socketEmit.typing(id, true)</code> on every keystroke &mdash; do not throttle it yourself.</strong> Since core v1.4.7 the SDK leading-throttles it internally to one emit per 3&nbsp;s per conversation, while <code>isTyping: false</code> always goes out and resets the window. Adding a second throttle on top makes the two windows interact unpredictably. You still want the trailing timer below, because that is what sends the <em>stop</em> edge.</p>
+  <p>Incoming events arrive as <code>'typing_indicator'</code> (not <code>'typing'</code>). The server broadcasts to everyone in the room including the sender, so filter your own echo by <code>userId</code>. Each store entry self-expires after 6&nbsp;s without a refreshing event, so a lost stop edge can no longer leave an indicator stuck.</p>
   <div data-p="rn web">
     <pre><code><span class="kw">const</span> timer = <span class="fn">useRef</span>&lt;<span class="tp">ReturnType</span>&lt;<span class="kw">typeof</span> setTimeout&gt;&gt;();
 
 <span class="kw">function</span> <span class="fn">onChangeText</span>(val: <span class="tp">string</span>) {
   <span class="fn">setValue</span>(val);
+  <span class="cm">// Fine to call per keystroke — core throttles this internally.</span>
   socketEmit.<span class="fn">typing</span>(conversationId, <span class="kw">true</span>);
   <span class="fn">clearTimeout</span>(timer.current);
-  timer.current = <span class="fn">setTimeout</span>(() => socketEmit.<span class="fn">typing</span>(conversationId, <span class="kw">false</span>), <span class="num">3000</span>);
+  timer.current = <span class="fn">setTimeout</span>(() => socketEmit.<span class="fn">typing</span>(conversationId, <span class="kw">false</span>), <span class="num">2000</span>);
 }
 
-<span class="cm">// Listen for others typing</span>
-socket.<span class="fn">on</span>(<span class="str">'typing'</span>, ({ conversationId, userId, displayName, isTyping }) => {
+<span class="cm">// Also send the stop edge when the composer unmounts or the</span>
+<span class="cm">// conversation changes — otherwise a pending debounce is discarded</span>
+<span class="cm">// and the peer's indicator lingers until it expires.</span>
+<span class="fn">useEffect</span>(() => () => {
+  <span class="fn">clearTimeout</span>(timer.current);
+  socketEmit.<span class="fn">typing</span>(conversationId, <span class="kw">false</span>);
+}, [conversationId]);
+
+<span class="cm">// Listen for others typing — event name is 'typing_indicator'</span>
+socket.<span class="fn">on</span>(<span class="str">'typing_indicator'</span>, ({ conversationId, userId, displayName, isTyping }) => {
+  <span class="kw">if</span> (userId === currentUserId) <span class="kw">return</span>; <span class="cm">// ignore our own echo</span>
   isTyping ? <span class="fn">addTypingUser</span>(conversationId, { userId, displayName })
            : <span class="fn">removeTypingUser</span>(conversationId, userId);
 });</code></pre>
   </div>
   <div data-p="node">
     <pre><code>socketEmit.<span class="fn">typing</span>(conversationId, <span class="kw">true</span>);
-<span class="kw">setTimeout</span>(() => socketEmit.<span class="fn">typing</span>(conversationId, <span class="kw">false</span>), <span class="num">3000</span>);</code></pre>
+<span class="kw">setTimeout</span>(() => socketEmit.<span class="fn">typing</span>(conversationId, <span class="kw">false</span>), <span class="num">2000</span>);</code></pre>
   </div>
+  <div class="callout info"><strong>Server-side suppression.</strong> chat-server skips typing broadcasts entirely in rooms with more than <code>TYPING_MAX_ROOM_SOCKETS</code> connected sockets (default&nbsp;30, <code>0</code> disables). In a large, busy group nobody sees an indicator &mdash; by design, since the UI can only render &ldquo;Several people are typing&hellip;&rdquo; there anyway. The count is sockets, not members, so one user on phone&nbsp;+&nbsp;laptop counts twice.</div>
 </section>
 
 <!-- ─── STEP 12: READ RECEIPTS & LAST SEEN ────────────────────────────── -->
@@ -5329,9 +5489,10 @@ Notifications.<span class="fn">addNotificationResponseReceivedListener</span>((r
   };
 
   <span class="kw">const</span> <span class="fn">onChangeText</span> = (val: <span class="tp">string</span>) => {
+    <span class="cm">// Per-keystroke is fine: core throttles typing:true internally.</span>
     <span class="fn">setText</span>(val); socketEmit.<span class="fn">typing</span>(conversationId, <span class="kw">true</span>);
     <span class="fn">clearTimeout</span>(timer.current);
-    timer.current = <span class="fn">setTimeout</span>(() => socketEmit.<span class="fn">typing</span>(conversationId, <span class="kw">false</span>), <span class="num">3000</span>);
+    timer.current = <span class="fn">setTimeout</span>(() => socketEmit.<span class="fn">typing</span>(conversationId, <span class="kw">false</span>), <span class="num">2000</span>);
   };
 
   <span class="kw">const</span> <span class="fn">loadMore</span> = <span class="kw">async</span> () => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@antzsoft/chat-core",
-  "version": "1.4.5",
+  "version": "1.4.7",
   "description": "Platform-agnostic core for Antz Chat — API, socket, stores, types. Works in browser, React Native (Expo or bare), and Node.js.",
   "author": "Antz",
   "license": "MIT",

package/dist/chat.store-UVTDBPEC.js

@@ -1,7 +0,0 @@
-import {
-  useChatStore
-} from "./chunk-UIYJAOGL.js";
-export {
-  useChatStore
-};
-//# sourceMappingURL=chat.store-UVTDBPEC.js.map

package/dist/chunk-UIYJAOGL.js

@@ -1,62 +0,0 @@
-// src/stores/chat.store.ts
-import { create } from "zustand";
-var useChatStore = create((set) => ({
-  activeConversationId: null,
-  pendingTarget: null,
-  typingUsers: {},
-  onlineUsers: [],
-  lastRead: {},
-  lastSeen: {},
-  replyingTo: null,
-  editingMessage: null,
-  forwardingMessage: null,
-  isSidebarOpen: true,
-  isGroupInfoOpen: false,
-  isStarredPanelOpen: false,
-  messageInfoId: null,
-  setActiveConversation: (id) => set({ activeConversationId: id, replyingTo: null, editingMessage: null, forwardingMessage: null }),
-  setPendingTarget: (target) => set({ pendingTarget: target }),
-  addTypingUser: (conversationId, user) => set((state) => {
-    const existing = state.typingUsers[conversationId] ?? [];
-    const deduped = existing.filter((u) => u.userId !== user.userId);
-    return { typingUsers: { ...state.typingUsers, [conversationId]: [...deduped, user] } };
-  }),
-  removeTypingUser: (conversationId, userId) => set((state) => ({
-    typingUsers: {
-      ...state.typingUsers,
-      [conversationId]: (state.typingUsers[conversationId] ?? []).filter(
-        (u) => u.userId !== userId
-      )
-    }
-  })),
-  setUserOnline: (userId) => set((state) => ({
-    onlineUsers: state.onlineUsers.includes(userId) ? state.onlineUsers : [...state.onlineUsers, userId]
-  })),
-  setUserOffline: (userId) => set((state) => ({ onlineUsers: state.onlineUsers.filter((id) => id !== userId) })),
-  setOnlineUsers: (userIds) => set({ onlineUsers: userIds }),
-  setLastRead: (conversationId, messageId, readAt) => set((state) => ({
-    lastRead: { ...state.lastRead, [conversationId]: { messageId, readAt } }
-  })),
-  setLastSeen: (userId, lastSeenAt) => set((state) => {
-    if (lastSeenAt === null) {
-      const { [userId]: _, ...rest } = state.lastSeen;
-      return { lastSeen: rest };
-    }
-    return { lastSeen: { ...state.lastSeen, [userId]: lastSeenAt } };
-  }),
-  setReplyingTo: (message) => set({ replyingTo: message, editingMessage: null }),
-  setEditingMessage: (message) => set({ editingMessage: message, replyingTo: null }),
-  setForwardingMessage: (message) => set({ forwardingMessage: message }),
-  toggleSidebar: () => set((state) => ({ isSidebarOpen: !state.isSidebarOpen })),
-  setSidebarOpen: (open) => set({ isSidebarOpen: open }),
-  toggleGroupInfo: () => set((state) => ({ isGroupInfoOpen: !state.isGroupInfoOpen })),
-  setGroupInfoOpen: (open) => set({ isGroupInfoOpen: open }),
-  toggleStarredPanel: () => set((state) => ({ isStarredPanelOpen: !state.isStarredPanelOpen })),
-  setStarredPanelOpen: (open) => set({ isStarredPanelOpen: open }),
-  setMessageInfoId: (id) => set({ messageInfoId: id })
-}));
-
-export {
-  useChatStore
-};
-//# sourceMappingURL=chunk-UIYJAOGL.js.map

package/dist/chunk-UIYJAOGL.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/stores/chat.store.ts"],"sourcesContent":["import { create } from 'zustand';\nimport type { Message } from '../types/index.js';\n\ninterface TypingUser {\n  userId: string;\n  displayName: string;\n  avatarUrl?: string;\n}\n\nexport interface LastReadEntry {\n  messageId: string;\n  readAt: string;\n}\n\ninterface ChatState {\n  activeConversationId: string | null;\n  pendingTarget: { conversationId: string; messageId: string } | null;\n  typingUsers: Record<string, TypingUser[]>;\n  onlineUsers: string[];\n  /** keyed by conversationId — current user's last read pointer per conversation */\n  lastRead: Record<string, LastReadEntry>;\n  /** keyed by userId — last seen timestamp for each user */\n  lastSeen: Record<string, string>;\n  replyingTo: Message | null;\n  editingMessage: Message | null;\n  /** Message staged in the forward picker, null = picker closed. Unlike replyingTo,\n   * this does not fold into the next composer send — forwarding targets a different\n   * conversation and needs its own conversation-picker UI. */\n  forwardingMessage: Message | null;\n  isSidebarOpen: boolean;\n  isGroupInfoOpen: boolean;\n  isStarredPanelOpen: boolean;\n  /** messageId currently shown in the Message Info panel, null = closed */\n  messageInfoId: string | null;\n\n  setActiveConversation: (id: string | null) => void;\n  setPendingTarget: (target: { conversationId: string; messageId: string } | null) => void;\n  addTypingUser: (conversationId: string, user: TypingUser) => void;\n  removeTypingUser: (conversationId: string, userId: string) => void;\n  setUserOnline: (userId: string) => void;\n  setUserOffline: (userId: string) => void;\n  setOnlineUsers: (userIds: string[]) => void;\n  setLastRead: (conversationId: string, messageId: string, readAt: string) => void;\n  setLastSeen: (userId: string, lastSeenAt: string | null) => void;\n  setReplyingTo: (message: Message | null) => void;\n  setEditingMessage: (message: Message | null) => void;\n  setForwardingMessage: (message: Message | null) => void;\n  toggleSidebar: () => void;\n  setSidebarOpen: (open: boolean) => void;\n  toggleGroupInfo: () => void;\n  setGroupInfoOpen: (open: boolean) => void;\n  toggleStarredPanel: () => void;\n  setStarredPanelOpen: (open: boolean) => void;\n  setMessageInfoId: (id: string | null) => void;\n}\n\nexport const useChatStore = create<ChatState>((set) => ({\n  activeConversationId: null,\n  pendingTarget: null,\n  typingUsers: {},\n  onlineUsers: [],\n  lastRead: {},\n  lastSeen: {},\n  replyingTo: null,\n  editingMessage: null,\n  forwardingMessage: null,\n  isSidebarOpen: true,\n  isGroupInfoOpen: false,\n  isStarredPanelOpen: false,\n  messageInfoId: null,\n\n  setActiveConversation: (id) =>\n    set({ activeConversationId: id, replyingTo: null, editingMessage: null, forwardingMessage: null }),\n\n  setPendingTarget: (target) => set({ pendingTarget: target }),\n\n  addTypingUser: (conversationId, user) =>\n    set((state) => {\n      const existing = state.typingUsers[conversationId] ?? [];\n      const deduped = existing.filter((u) => u.userId !== user.userId);\n      return { typingUsers: { ...state.typingUsers, [conversationId]: [...deduped, user] } };\n    }),\n\n  removeTypingUser: (conversationId, userId) =>\n    set((state) => ({\n      typingUsers: {\n        ...state.typingUsers,\n        [conversationId]: (state.typingUsers[conversationId] ?? []).filter(\n          (u) => u.userId !== userId,\n        ),\n      },\n    })),\n\n  setUserOnline: (userId) =>\n    set((state) => ({\n      onlineUsers: state.onlineUsers.includes(userId)\n        ? state.onlineUsers\n        : [...state.onlineUsers, userId],\n    })),\n\n  setUserOffline: (userId) =>\n    set((state) => ({ onlineUsers: state.onlineUsers.filter((id) => id !== userId) })),\n\n  setOnlineUsers: (userIds) => set({ onlineUsers: userIds }),\n\n  setLastRead: (conversationId, messageId, readAt) =>\n    set((state) => ({\n      lastRead: { ...state.lastRead, [conversationId]: { messageId, readAt } },\n    })),\n\n  setLastSeen: (userId, lastSeenAt) =>\n    set((state) => {\n      if (lastSeenAt === null) {\n        const { [userId]: _, ...rest } = state.lastSeen;\n        return { lastSeen: rest };\n      }\n      return { lastSeen: { ...state.lastSeen, [userId]: lastSeenAt } };\n    }),\n\n  setReplyingTo: (message) => set({ replyingTo: message, editingMessage: null }),\n\n  setEditingMessage: (message) => set({ editingMessage: message, replyingTo: null }),\n\n  setForwardingMessage: (message) => set({ forwardingMessage: message }),\n\n  toggleSidebar: () => set((state) => ({ isSidebarOpen: !state.isSidebarOpen })),\n  setSidebarOpen: (open) => set({ isSidebarOpen: open }),\n\n  toggleGroupInfo: () => set((state) => ({ isGroupInfoOpen: !state.isGroupInfoOpen })),\n  setGroupInfoOpen: (open) => set({ isGroupInfoOpen: open }),\n\n  toggleStarredPanel: () => set((state) => ({ isStarredPanelOpen: !state.isStarredPanelOpen })),\n  setStarredPanelOpen: (open) => set({ isStarredPanelOpen: open }),\n\n  setMessageInfoId: (id: string | null) => set({ messageInfoId: id }),\n}));\n"],"mappings":";AAAA,SAAS,cAAc;AAwDhB,IAAM,eAAe,OAAkB,CAAC,SAAS;AAAA,EACtD,sBAAsB;AAAA,EACtB,eAAe;AAAA,EACf,aAAa,CAAC;AAAA,EACd,aAAa,CAAC;AAAA,EACd,UAAU,CAAC;AAAA,EACX,UAAU,CAAC;AAAA,EACX,YAAY;AAAA,EACZ,gBAAgB;AAAA,EAChB,mBAAmB;AAAA,EACnB,eAAe;AAAA,EACf,iBAAiB;AAAA,EACjB,oBAAoB;AAAA,EACpB,eAAe;AAAA,EAEf,uBAAuB,CAAC,OACtB,IAAI,EAAE,sBAAsB,IAAI,YAAY,MAAM,gBAAgB,MAAM,mBAAmB,KAAK,CAAC;AAAA,EAEnG,kBAAkB,CAAC,WAAW,IAAI,EAAE,eAAe,OAAO,CAAC;AAAA,EAE3D,eAAe,CAAC,gBAAgB,SAC9B,IAAI,CAAC,UAAU;AACb,UAAM,WAAW,MAAM,YAAY,cAAc,KAAK,CAAC;AACvD,UAAM,UAAU,SAAS,OAAO,CAAC,MAAM,EAAE,WAAW,KAAK,MAAM;AAC/D,WAAO,EAAE,aAAa,EAAE,GAAG,MAAM,aAAa,CAAC,cAAc,GAAG,CAAC,GAAG,SAAS,IAAI,EAAE,EAAE;AAAA,EACvF,CAAC;AAAA,EAEH,kBAAkB,CAAC,gBAAgB,WACjC,IAAI,CAAC,WAAW;AAAA,IACd,aAAa;AAAA,MACX,GAAG,MAAM;AAAA,MACT,CAAC,cAAc,IAAI,MAAM,YAAY,cAAc,KAAK,CAAC,GAAG;AAAA,QAC1D,CAAC,MAAM,EAAE,WAAW;AAAA,MACtB;AAAA,IACF;AAAA,EACF,EAAE;AAAA,EAEJ,eAAe,CAAC,WACd,IAAI,CAAC,WAAW;AAAA,IACd,aAAa,MAAM,YAAY,SAAS,MAAM,IAC1C,MAAM,cACN,CAAC,GAAG,MAAM,aAAa,MAAM;AAAA,EACnC,EAAE;AAAA,EAEJ,gBAAgB,CAAC,WACf,IAAI,CAAC,WAAW,EAAE,aAAa,MAAM,YAAY,OAAO,CAAC,OAAO,OAAO,MAAM,EAAE,EAAE;AAAA,EAEnF,gBAAgB,CAAC,YAAY,IAAI,EAAE,aAAa,QAAQ,CAAC;AAAA,EAEzD,aAAa,CAAC,gBAAgB,WAAW,WACvC,IAAI,CAAC,WAAW;AAAA,IACd,UAAU,EAAE,GAAG,MAAM,UAAU,CAAC,cAAc,GAAG,EAAE,WAAW,OAAO,EAAE;AAAA,EACzE,EAAE;AAAA,EAEJ,aAAa,CAAC,QAAQ,eACpB,IAAI,CAAC,UAAU;AACb,QAAI,eAAe,MAAM;AACvB,YAAM,EAAE,CAAC,MAAM,GAAG,GAAG,GAAG,KAAK,IAAI,MAAM;AACvC,aAAO,EAAE,UAAU,KAAK;AAAA,IAC1B;AACA,WAAO,EAAE,UAAU,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,GAAG,WAAW,EAAE;AAAA,EACjE,CAAC;AAAA,EAEH,eAAe,CAAC,YAAY,IAAI,EAAE,YAAY,SAAS,gBAAgB,KAAK,CAAC;AAAA,EAE7E,mBAAmB,CAAC,YAAY,IAAI,EAAE,gBAAgB,SAAS,YAAY,KAAK,CAAC;AAAA,EAEjF,sBAAsB,CAAC,YAAY,IAAI,EAAE,mBAAmB,QAAQ,CAAC;AAAA,EAErE,eAAe,MAAM,IAAI,CAAC,WAAW,EAAE,eAAe,CAAC,MAAM,cAAc,EAAE;AAAA,EAC7E,gBAAgB,CAAC,SAAS,IAAI,EAAE,eAAe,KAAK,CAAC;AAAA,EAErD,iBAAiB,MAAM,IAAI,CAAC,WAAW,EAAE,iBAAiB,CAAC,MAAM,gBAAgB,EAAE;AAAA,EACnF,kBAAkB,CAAC,SAAS,IAAI,EAAE,iBAAiB,KAAK,CAAC;AAAA,EAEzD,oBAAoB,MAAM,IAAI,CAAC,WAAW,EAAE,oBAAoB,CAAC,MAAM,mBAAmB,EAAE;AAAA,EAC5F,qBAAqB,CAAC,SAAS,IAAI,EAAE,oBAAoB,KAAK,CAAC;AAAA,EAE/D,kBAAkB,CAAC,OAAsB,IAAI,EAAE,eAAe,GAAG,CAAC;AACpE,EAAE;","names":[]}